Set up users with access based on their role and limit access to data down to the building and account level.