permit others isolated access to my network...

I would like to permit others isolated access to my network.

My local network consists of two interfaces as follows:

MNIC: Management Network (192.168.1.0/24)
XNIC: External Network (10.0.0.0/24)

The simplicity of this has permitted me to focus on linux, bash and iptables.

I would like to provide others with access to my External Network (XNIC) services, such as smb, nfs and http/s services, each on their own private XNIC network, and only that access.
Some of those services I would like to be common among all users, while others I would like to run unique instances of for each user.

I am expecting delivery of an RB5009UG+S+IN in the hopes that it would provide the functionality I need.
I have no experience with Mikrotik however, and I am at a loss of where to start.
I would truly appreciate some guidance on how to achieve all this. I am open to compensation if this is nontrivial.
My goal is to bring my network configuration into the bash world, where I am comfortable and the rest of my configuration script lives.
When a new user is created, I would run some bash script that configures a private XNIC for them.

Thanks,
kendal

https://mikrotik.com/consultants