Everyone,
I found the right combination and I have the account-aware reports working in the newest CABI. It is different than the others in the community said and I understand it is because we are using the internal UIM CABI.
There are four steps to add multi-tenancy to a public report:
1) Create a parameter called "LoggedInTenantAttribute_allowed_origins" in the report as a String. Set the default value to "SELECT DISTINCT ORIGIN FROM S_QOS_DATA" so it will work if you are not in an Organization.
2) Add the parameter to the WHERE clause of the SELECT statement like this: "AND origin IN ($P!{LoggedInTenantAttribute_allowed_origins})"
3) In the report properties, add "com.ca.uim.cabi.common.ReportUtils" to the "Imports" section. Set the report language to "Java".
4) Copy and paste the file "uim.core.dashboards_utils.jar" as a resource along side of the report source and any input controls.
This correctly filter the report to include only those origins the Organization can see. I have learned that the Spectrum version of CABI handles multi-tenancy differently. This solution only works if you are using the internal UIM version.
Thanks to everyone who responded. I hope this will help those who are working on the same problem.