How do i control the users that are synced from azure ad?

For instance, we have 12k users and i only want about 1k to be able to place service requests. Any idea how to limit it?

And any way to make the sync frequency like much faster. Like i would want it to sync once every hour. Currently seems limited to once per day.