Similar question was asked already, " Limiting group/user visibility" at
other than this I couldn't find any clues if that's possible.
If I was to manage separate organizations with own users, computers and
other entries in one ipa server - would such scenario be possible?
Manage your subscription for the Freeipa-users mailing list:
Go To http://freeipa.org for more info on the project