How to authorize only specific cloud-hosted environments in LCS

Several cloud-hosted environments exist for LCS projects.
We would like to add a user who can operate the LCS, but we would like that user to be able to operate only on a specific cloud-hosted environment.
They should not be able to operate on all of them.

How can we do this?

Thanks for your help.

When you mean “operate”, what do you mean? If it’s see it in LCS, you can’t do that. If it’s control it (like powering it on or something), you can limit access using Azure access control policies.