Hi Suzanne

Users are assigned to Groups globally, and all Users in the same Group have the same security access.

If you want to restrict a User to one's own company's data, you need to assign them to a Group that is different than the Group assigned to Users who can access other companies' data.

Steve