separate login for company data

when employees come to my desk and i want to show them something company data shouldn't be viewable. it should be separate bc it is separate from clients. even with restrictions employee admin have access to too much and i need them to be admin on just client items.