Granular data access control for users

I’m using Grafana Cloud and I’d like to restrict users from viewing some data. Specifically, I’d like to grant access to our Prometheus instance, but restrict what data you can pull from that data source.

Basically, I’d like to be able to assign access policies like LBAC but for users instead of Tokens. Right now even if I restrict a user’s access to a Dashboard, they can still see the underlying data in the Explore view. I don’t want to remove access to the Explore view, because it is a very useful tool. Instead, I just want to restrict what data a user can access.

Is there any LBAC-style feature for users that I’m unaware of?

I found these topics which are asking a similar question, but they remain unanswered:

Thanks!