SSAS Parent-Child Hierarcy security using AD ID

Hello,

I'll keep this question simple initially, but happy to add test data if required.

I have a parent-child dimension in an SSAS cube that is modelled on our company's staff hierarchy and their Active Directory IDs.

Is it possible to attach security/configure this dimension so that the user can only view measure information about descendants in the hierarchy by passing the user's AD ID to the cube either:

- as a role or

- as an MDX expression?

For context, the user will be using Power BI and/or SSRS to browse the cube.

Thanks!

ZP