Apache Airflow Multi Tenant -

i'm attempting work out how airflow might work in multi-tenant environment. requirements should this:

1. two teams, teama , teamb, using single airflow instance.
2. team's , b each have own service user account: serviceusera , serviceuserb should run jobs under.
3. for security reasons, team should not able create jobs run under serviceuserb , vice versa.

at point it's not clear me whether requirement 3) can met airflow, short of giving each team separate airflow instance. there way in can achieved?

thanks,

chris