Want to restrict supplier attachment access

Content

How are other entities handling the supplier W9 records in Fusion Cloud? We allow many of our users to see/search supplier records for payables purposes, without access to tax ID. We want to save the supplier paperwork on the supplier record, but are not sure how to lock down the attachment to the small list of users who might need to see the tax information. Is there any security or configuration that can be done to accomplish this? Thanks!!