In data security, access to sensitive data is given on what is called a "need to know basis".

The same principle should apply here.