Allow specific users to access specific machines by configuring host groups with a set of your own rules. Make a user an Administrator or normal user based on a preconfigured LDAP group.