I have configured ldap and can use ldap users to log in to the web engine There are many data center clusters and virtual machines in my environment. I should have more precise control over users The general manager can see several data centers he manages and can manage them There are three employees, A, B, and C, under the general manager. These three employees manage these data centers separately, and I want the three employees of A, B, and C to not be able to see each other's data centers.