I have a question regarding Openstack, is it possible to limit access for a user to get read only on a specific project that he can only see the instances in that project and eliminate the actions edit,start,stop or delete instance ?

i have tried some tests grant member role only to the group but all users in the group were able to do everything with the instances

thank you in advance,

Samir