A proper permissions system for entities has long been one of my most desired features for Home Assistant. It should be possible to set visibility and control for each entity and user.
Trying to do control access via dashboards as always seems the wrong way around to me.