Actually one way I can think of is to use the "assigned users" in the integrated configuration. However, my opinion is that it is very clumsy alternative as you also have to add the user in the communication component. Users not added will lose their access and it presents a maintenance issue.
Of course, that user is still able to see all the service definitions in the SR.
Please advise if you know of a better way.
Thanks,
Jonathan.