As I am setting up access for our VP's to run reports, see vendor records & paid invoices, etc., I am realizing that our VP's will have access to ALL vendors or NO vendors - I can't restrict access to specific vendor records. 

A few of our VP's are actually contractors, so their vendor record basically shows their "salary".  Additionally, or CEO has reimbursements that I would rather not have viewable to the VP's.

Is it possible to flag vendors as "restricted", or at least allow a query to be honored where I can limit which vendor records are visible?