Security settings for tenant access

We have some user roles inside our company that are not allowed to access certain things, (clients/passwords) if possible, we would like to create some kind of security filter to allow users access to certain tenants, and not just ‘all’ tenants and being able to reveal passwords that are saved already.