Scoped DO tokens gets us partway there, granularity is now ALL resources of a specific type. I would like to see this extended to allow assigning a different role to each user, per resource. So User X can be an Admin for Resource A, a Viewer for resource B, and No Access for Resource C, even though A,B,C are all the same type of resource, for example DB cluster.

Now with scoped API tokens this should be much easier DO please implement!

This is really important!!