How do I restrict access to a datacenter for a certain user?

Hi,

I have a Vcenter server and I want to have a certain user see one datacenter, and not the other datacenters.  For example, the user manufacturing will see the Manufacturing datacenter, but they will not see the Service Data Center that the Service User sees.

How do I create a user that can only see and use one datacenter and not other datacenters?

Thanks,