From personalized roles, you can indicate if a user has access to leads, customers, suppliers, debtors or creditors (or several of these options).

For example, it would prevent business users from having access to suppliers.