you can restrict user by subsidiary or location. There is no way of restricting by customer category since customer category is part of the accounting list and does not have any permission criteria to set. There is another option though, by adding a custom segment for the entity(customer) and define ACL(Access Control Level) by role for the custom segment. This is a bit convoluted way but far more flexible and powerful. Note that suggestion is in theory haven't tested that.