Site User Password Access
Site Users are granted access to all credentials in root level of their Company Vault, and any unassigned folders. If you would like to limit access to passwords for Site Users, you can put such credentials in a folder with a Security Group assigned that specifies the users that should see the contents of the folder.
Site Users do not have access to any credentials in the MSP's Client Vault unless these passwords are shared with the Client Site.
Please refer to Managing User Access for details regarding configuring Security Groups and Folder Structures.