Capacity Level Administration Settings
In the current state you can only configure these tenant level settings for users and security groups. So if you allow security group A to use a feature, the users in security group A can use that feature across the workspaces in the tenant.
The capacity settings page in the Power BI admin portal should be enhanced to A) allow admins to see the default settings inherited from the tenant level and B) apply settings that are specific to the given premium capacity node. Only Power BI service administrators should be view and edit these capacity-specific settings, not capacity administrators.
In a future release Power BI admins should have a simple summary page in the admin portal that summarizes tenant and capacity settings applied and thus advises of any custom settings applied at the capacity level. This view and feature as a whole would be particularly valuable for larger and more complex and varied deployments involving many premium capacity resources and many distinct teams and applications.