Answer
Confirm this limitation for your release rather than assuming finer-grained control is available — project access control has generally supported the sub-project level as its finest granularity, not the individual activity. If you need activity-level separation, consider restructuring the work breakdown into additional sub-projects instead of expecting an activity-level access setting to exist.