Enforce permission by defining the organization(s) entitled for access.