Fine-grained group and user permissions for workspace templates. Restrict expensive compute, GPU workstations, and sensitive cloud environments to authorized developer teams.