I have a group
Feature Flag Managers
who can in general manage any target group in an env. This is already in place via the role/resource-group binding.
Now I have a specific target group say
xyz_tg
which should only be controlled by say
xyz_usergroup
and even users in
Feature Flag Managers
should not be allowed.