Sugar segregation of records assigned to distinct business units within the sugar

If you need to separate Sugar into 3 business units, and the teams/users associated with each can only see certain records (e.g. accounts/contacts/opportunities etc.) associated to their respective business unit they belong to. Any ideas how this could be implemented/configured?

Thanks