More granular access control

[drq]

Is there a way to enable a specific user the Read access to not specific datastore or specific namespace but specific resource?

Like, "datastore/backups/cluster1/ct/102"

 

[fabian]

not directly. you could give that user limited privileges (DatastoreBackup or DatastorePowerUser) and make them the owner of the group (if other users that need access are higher privileged - like DatastoreAdmin - and can access the whole namespace).