Can user tokens be restricted by project? Can runner tokens be restricted by project?

Hi Eric, we’re working on a variety of improvements to granular auth, and this may be included. Stay tuned.

Understood. This could be useful in a multi tenant or multi department scenario.