Thanks Dmitry. That is helpful background. I pulled together that through a query and joined with the nodeacl and pulled it together.
Unfortunately, I realized I have been thinking about the problem backwards. I was planning to add this filter after the Azure results are returned, and show or hide individual entries. What I really need to do is have an Azure filter, so only the entries are returned I want to begin with. This would be more efficient and make all the niffy Azure feature, like facets work correctly.
Your idea did solve the question I asked, and I marked it as correct.