anthos kubectl IAM capabilities – Google Cloud Community

I am evaluating anthos  and have the following requirement

Is it possible to organize users in groups, have the same user in multiple groups and control at the level of  group or user within a group, which kubernetes cluster is accessible for these same groups and users and what is allowed. 

Example:

in group1, admin1 can create namespaces.

in group1, user2 cannot create namespaces but can create deployment in specific namespaces already created for him by his  admin1 , and can only access  cluster1,2,3 

in group2 , same user2 can create deployment and policies in other namespaces but only in cluster2,3,4