Having RAH user defined privilege on Accessing Q/B drive files on the same account

A Partner has requested to be able to make limitations on RAH Users for one account.

If users are defined and have access to a shared folder, they can download files from the shared folder on Q drive.

Partner said he had done User restrictions by defining User roles on the company file but he needs this level restriction too.