In the Tree Permissions tab, you can allow or deny access to a complete tree to a user. This is especially useful if you are monitoring different customers with a single Cacti instance and want to provide each customer access to their devices:
