RHEV 2.2 user permissions

Has anyone found a way to restrict a user in RHEV 2.2 to a particular DC, or even a particular set of VMs?

We're just using servers at the minute, no desktops, and it seems strange that there'd be no provision for this.