Hi @ryanlebato,
Thanks for reaching out! We have environment permissions on the Enterprise plan. Teams on the Business plan cannot set app/resource permission based on environment. For Enterprise organizations, you can expand each resource in the permissions settings to select a specific environment:
Then, when the user accesses the app, they'll only have access to query that resource in the environment according to their permission groups
The _environment url param (Built-in URL parameters | Retool Docs) should work when logged in, but it won't work in public apps.