You can put all Resources in a "Public" Resource Group, but no, you cannot attach access control permissions to Resources that are not protected by a Resource Group.
Is there any way to give users "load" and "list" access for a specific resource group but not for the "public" resources?