This PR will fix the following 2 Rbac related issues: Restricted user can see vm/instance from different groups which have tags from users group Rbac | Tag: Inconsistency in group/tag restriction for 'group or user owned' roles