MY Compliance Vision allows you to define as many user permissions as you need. you can control what each user does, which modules they have access to and even change those permission in each location. 

Assign a user a Role that you have created and which location that Role applies. They could have full access in their main location but only read-only access when they look at record from another location.

It entirely up to you how you set them up, or you could decide just to use the pre-built user permissions that come with the system out of the box!