If your organization is on a Team or Enterprise plan (or free trial), you’ll see a Teams tab in the Pulumi console that lets you ascribe stack-specific permissions to a team, yes.
miniature-musician-31262
07/22/2019, 3:31 PM
But you’re correct in that an access token represents a user; there is not currently a concept of a token having roles or permissions separate from those of the user they belong to.