Only allow a subset of users to access ms graph api methods even though tenant has permission

Question

I have a React SPA client that uses Azure AD accounts to login using MSAL 2.0 with code flow. I want to be able to manage the Azure AD accounts for the tenant within the Rea