This is not ideal but should work. It is nicer to admin in AD rather than a seperate list.
In your form setup a data connection to the list.
On load the whole list will load
Then use filters on the list to get the details where username = the username for the list.
Then you have the data for your logic.