If I want to manage users e.g.

poweruser – can do anything
user – any queries allowed but no changing data
restricteduser – only some queries against certain tables permitted

How can I do this in kdb?

Our audit department did not like that we have no restrictions in place. 🙂