Is there a way to restrict access to content to a single user versus general restrictions to the entire org unit?

You may restrict access to content to a single user by setting a release condition. Under the specific content’s Release Conditions, and select Create.

You may restrict access to a single user by enrolling that particular user in a group, then choosing Group enrollment as the Condition Type.

Under Condition Details, you can then select that particular user’s group.