I would like to be able to grant specific AD users / groups access to specific instances on a cluster. Currently its only possible to grant access at the cluster level which gives more access than is necessary. This would be a supremely useful feature for me!