You can limit users from being able to add/remove network interfaces to the physical servers and VMs, but you cannot limit what interface is available after it is added to the physical server.
yeah thats what I gather. For a variety of reasons I'd like to limit some users to a specific bridge and it would be very helpful if that was a user management option.