Specific user access for AR experiences?

With either an on premise solution or cloud is there a way to limit, or control, which users can see specific AR Experiences. 

It is my understanding that users access experiences using the Experience Service URL. There is then optional control of whether that user is required to login in order to view an experience (public or restricted). 

I want to know if the experiences that are show can be filtered/restricted for users. An example could be for different departments in a company and only showing the experiences that are relevant.