Restrict Organization visibility on the basis of Custom Attribute for different user roles

Summary:

Our client have a requirement, where Organization are being updated as Status - Active, Inactive, Pending, Failed on basis of some internal processes and criteria. For different User roles such as Business Data Steward, CDM user (Read only), Approver etc. should have visibility to only Organization having specific
Status value.

For example - Data Steward should be able to view Organization with all the Status value.
Approver should be able to view only Organizations with Active and Pending Status.

CDM User(Read Only) should have visibility for only Active Organizations.

How can we achieve this in CDM?