[ovirt-users] Why do users with UserRole see all VMs

Hi Everyone, Whenever I add a new user and give them system permission with the UserRole, they can see all VMs in the data center. I can only control what VMs a user have access to if their role to access the system was set to PowerUserRole. I've tried this on fresh installs and still the same result - with both internal and LDAP users. Can someone help to let me know what I'm doing wrong? Thanks.