Given a set of resources, returns the set of resources that the user is authorized to access, per their organization.