Permissions

So we're trying to build a panel and thinking about how to organize users. We understand pools may be the easiest way to do this but looking in pvesh, where does Proxmox keep track of which user controls what resources?

ie if I give a user access to a pool and he creates a VM in that pool, how does proxmox know only that user has access to that VM?

We did a pvesh get /nodes/nodeid/qemu

and the output doesn't show anything about who created it / has access to it?

We seem to be able to get everything else but that