Description of problem:

Openstack objects with a single tag (Provider, 1-Availability Zone(nova), 1-Tenant(cfme), 1-Security group(default), 1-Flavor (m1.tiny)

User with a group based on a single tag that was used above with a limited role of cloud access. 

When this user logs in they will be filtered down to the tag objects of availability zone and security groups but the tenant and flavors are not being filtered out. The user can see all of the flavors and all of the tenants that belong to the openstack env. 

Version-Release number of selected component (if applicable): 5.4.1


How reproducible:
very

Steps to Reproduce:
1. see above
2.
3.

Actual results:


Expected results:


Additional info: