Restricting the ability for users to create projects at the Jenkins top-level vs inside Folders
https://docs.cloudbees.com/docs/cloudbees-ci-kb/latest/client-and-managed-controllers/restricting-the-ability-for-users-to-create-projects-at-the-jenkins-top-level-vs-inside-folders
Folders plugin
https://docs.cloudbees.com/docs/cloudbees-ci/latest/cloud-secure-guide/folders
Configuring restricted credentials with the CloudBees Restricted Credentials plugin
https://docs.cloudbees.com/docs/cloudbees-ci/latest/cloud-secure-guide/restricted-credentials