M365 / Google Workspace Granular access/permissions for domain users