In addition to your suggestion there may be a way to combine this per the response to the following post by passing the user id and or group id to a locked parameter within the embed. Does that sound viable?
PS, Oh, yes, you indicated as much in this post to AndrewMBaines! Now how to tie that to a group, a Metabase group or some group defined elsewhere?... It has possibilities, I'll have to study this.