How To assign permission to user can access 1 host and VM inside

Dear All

     I have 3 ESX host with standard license and vCenter Server standard  license , I create One Site and One Cluster Group, I already connect vcenter and active directory to used  AD user  login  to vcenter server

   I need to assign support user can mange only one host and virtual machine that used these host to share resource , but support user can not access to other host and other VM that is not used these host for share resource ,

please guide me how to do it