Is it possible to limit a user to specific network bridges?

You can limit users from being able to add/remove network interfaces to the physical servers and VMs, but you cannot limit what interface is available after it is added to the physical server.