Please check Restricting access to your organization's data