How to restrict a User's access to a Project or set of Projects

We are looking for functionality to restrict users to a Project or set of Projects in the Project module and in other subledger modules like Payables and Procurement. We can restrict by Organization or BU by using the Data access set for users but we want to go a level down to Projects.

For example, there are 10 Projects created for a specific BU and Project Owning Organization combination. We want to restrict access of User A to only Project 1 and Project 2 out of those 10 Projects.

This access control we require at 2 levels

1) Within the Project module

2) In other sub-ledger applications like Payables and Procurement (Like User A should be able to find only Project 1 and Project 2 while creating Payables invoice or PO