user vs owner Containerization and CageFS

I’ve not got all the licenses in place at moment to see exactly how limits can be applied. Do they apply to the site user or owner. I.e. are they applied at client level or can they be applied at the reseller level. Or do sites run as the owner, so by default at a reseller level?