Limit ManageIQ user to single openstack project/ multiple projects/ single instance

Can a SME please post procedure / steps to accomplish following ?

  1. Limit a User to one openstack Project / Tenant with rights equal to Horizon Tenant Admin ?
  2. Limit a User to single openstack instance - Only view rights & Provision Request rights ?
  3. Limit a User to multiple openstack projects / tenants with member or admin rights ?