[ceph-users] cephfs client capabilities

Hi all, How to restrict an user that cannot create volume, subvolume group, subvolume of cephfs? This user only can access(mount) a subvolume. Thanks in advance Yufan Chen