Group users can see all companies. Company users are restricted to their assigned company. Mobile app modes control kiosk and individual attendance access.