Restrict access to accounts.

There are several Business Units.
Each user works in his region.
How to limit accounts for users? It is necessary for the user to see accounts in his region.
Tried to limit with the help of roles, it did not turn out.
Why, when sharing an account, the team can see the orders of this account.