DC Network Managed by different teams

Hi guys, A customer that is a group of different companies want to implement a DC Network (vPC based or Spine-Leaf with VXLAN EVPN/ACI - we are still defining which option to use). This network will integrate all the current networks of all the companies for sinergy, but each company must be able to configure and manage only its Tenants/VRFs/vDCs and so on. Which options do we have? I know ACI with its security domains, that allows for separate management of specific tenants, is it possible to do something similar with VXLAN EVPN or classic vPC multi-tiered?

Thanks!