Enable Keystone Endpoint Filter catalog driver which allows administrators to define Keystone Endpoint Group filters, and assign them to projects in order to limit an end-user's access to defined regions, services, interfaces, or any combination thereof.

https://developer.openstack.org/api-ref/identity/v3-ext/#os-ep-filter-api