Per AAH-1514, the UI should support user permission mapping: https://github.com/ansible/galaxy_ng/blob/8a1f0041adbe3653fcaa2c30fde489c042d68d1b/galaxy_ng/social/__init__.py#L116-L117

that use the existing pulp apis

User > User Role > Permissions
jdoe > predefined_user_role_jdoe > edit_namespace(obj:google_cloud_ns)