we'd like to add this feature at some point (containerization)

we don't support that yet

but with pundit and a role system (DIY or something like rolify) you can go far