Define access to specific machines

Client defines people accesses by groups, with specific policies, that is, I only see my machines, but when entering the "LMI antivirus policy" tab, the technician is able to view the policies of all groups. Then a person sees the policies applied to other machines and changes them

Client said the following: It makes no sense to define access to specific machines, if when opening the antivirus tab it gets lost.