API permission for user and only his pool

[sys7em]

What we are trying to achieve is to be able to give permission to users to clone,create,destroy VMs over the API in their only pool only. So the goal is they see and do only what is in their own pool. We have achieved that in the UI as giving them permission to:

Path Role
/pool/user PVEDataStoreUSer
/pool/user PVEVMAdmin
/ppol/user PVEPoolAdmin

but this is not working via API. It only works when give the user permission in the root / path , which makes eventually the user see all other VMs.

Is that achievable ?

Thanks.