Yes, that's the purpose of creating groups. 

To restrict a user's authorisations to a limited number of the company's facilities, you just need to attach the user (when creating them or later) to one or more existing groups comprising the desired facilities. 

You can also, if necessary, create a new group comprising the desired facilities and grant the user access to it.

The user will be informed by email of the authorisations linked to their user account. 

As an administrator, you can also restrict users’ rights by assigning them roles restricted to a group of companies.