Big-IQ device permissions

Hi,   I understand users and roles within Big-IQ. What I can't seem to find though is how to limit a user (with a role) to a specific device or device group. My Big-IQ manages several devices, I...