If you do not want them to use a NAT, then you need to make an External Network with a /28 PER Organization and assign that as a Direct External Org Network.
Otherwise, I think you probably need to NAT through an edge gateway and use Sub Allocation to give them specific IP Addresses for the /28.