Hi,
This is very easy. Just assign Contributor role or Reader role (depending on your requirements) for each user or set of users (groups) per project resource. Do not give any access above the resource.
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.