Does APISIX Dashboard allow for an ACL for accessing the api catalog?

[NNicoletti]

Hi everyone!

We're looking at Apache APISIX at my organization for our API Gateway solution. I was wondering if APISIX allows for an access control list for the dashboard? Not on individual routes, as I understand it this can be done with a combination of consumers and plugins, but to give certain customers access to the dashboard in a viewer state with only specific routes/upstreams/etc. available for them to see and/or interact with.

For example, say I have 10 routes created. Customer 1 wants the ability to see routes 1-4, customer 2 wants to see routes 5-6, and then routes 7-10 are reserved for us (who can see them all).

As a related question, is there a way to create more users than admin and viewer? If possible, can it be done without having to update config.yaml?