Tenant level user restrict to view Instance

How can we restrict users under one tenant view instance of other tenant users

I think you are looking for (visibility) tags?

I created joe user and assigned Engineering tag under department,but I’m unable to create Instance,unable to view even cloud provider which I have configured in admin login it is visible there .

image

Unable to provision instance
image

Joe user info

Self Service Role info

Engineering Group Info
image

image