BIG IQ limiting device access for different users

Hi, i deployed BIG-IQ 5.4 on VMWARE ESX, i need to limit the access to BIG IP Devices on my deployment, for example, the userA can access/control BIGIPA and BIGIPB, and the userB can access/control BIGIPC and BIGIPD, but not to BIGIPA and BIGIPB, is it possible?, how can i achieve this?, thanks for you help.