Users, organization, application, specific api

hi all I got B2B plan and i have different users and different applications and different organizations in my tenant, is there a way where users login through new universal login and they will see only the organization(s) and application(s) they suppose to see? i have installed user import export extention and from what i search so far I need to do something about the role, rules,user metadata and action but I could not find any proper guidance to achieve what I am looking for, can anyone here share your knowledge about this?