Is there a way to allow access for a user to Infrastructure>Compute>VMs and restrict in the same time access to Infrastructure>Compute>Hosts? Right now for user role permissions we only have: Infrastructure>Compute: FULL, READ, NONE. I guess we need more granular permission to these resources
I don't believe this is possible. Like you mentioned, a more granular RBAC may be needed. It may be a good idea to post it on our Ideas section of the forums. There is one asking about granular RBAC around instance actions, it is a different topic but RBAC is being asked for other features:
think only way (kinda) is sharing clouds from master tenant to subtenants. they can see the vms assigned to them and use the hosts, but wont see the hosts in infra