Hybrid Power BI design

Hi everyone,

We have a client who has Power BI requirements as follows:

1. They have Office 365 subscription and On-Premises environments.
   
   
2. All users are the Office 365.
   
   
3. They want to leverage Power BI for their SQL Server 2016 with Analytic services.
   
   
4. Only Finance team should be able to view reports on the On-Premises environment.
   Q: Can we use Row Level Security for this?
   
   
5. All other users can access the Power BI reports on the Office 365.
   
   I have seen building hybrid business intelligence environments whitepaper and the client has not used IaaS and PaaS services at the moment.
   
   
   
   Q: Can we propose what they have SaaS (Office 365) and On-Premises as they might not consider their data on Azure?
   
   
   Q: What will be the best architecture to achieve this for this client?

Thanks a ton, advance.