How to make only specific security group can access custom app in Teams

Hello, 

we're developing custom app using Powerapps and publish it in Teams,

but we jst want to make only specific security groups access the app, not the entire organization.

We tried with the permission policy - block the app for whole org and add setup policies for installing apps then add policy package using the setup policies, and finally assign it to the specific group, but it failed because we can not apply permission policy..

After that we tried to install app manifest for security group, but this option we can not find in setting.

Any Idea? we desperately need someone's idea for working on this.

Thank you so much!