Restrict user access to subsidiary company controls

Customer would like to control how users can access subsidiaries.

They want users to have NO access to parent (which in their world is sometimes just a holding pot for OB, to relate subsidiaries) - and only some subsidiaries