In the current state you can only configure these tenant level settings for users and security groups. So if you allow security group A to use a feature, the users in security group A can use that fe...
I totally agree this would be a valuable feature. In my organisation we have a multi capacity environment where we allow different levels of control depending on the capacity purpose. For example we provide a self service capacity for discovery and innovation which has a light governance model and then the complete opposite for capacities that are Globally IT managed and need a tighter level of control. Having the ability to specify some of the current tenant level settings to apply for specific capacities would make this much easier for organisations to manage these type of scenarios.
