When a new store under a company location is created, the store permitted roles also mapped (only those roles under 'Asset In Charge' role group are listed for permission mapping). This is done through 'Manage Stores' page. Only those users permitted to that roles can access the items in that store.