Row Security setup for Intercompany Orders

We are running a JDE E1 installation servicing multiple independent companies within our overall organization. We have been using various transfer orders between companies (SF/OF and SI/SK/OK mostly).

Generally speaking, we have row security that limits users on Company and MCU. A user would have row security assigned for just their company and the branch plants within it.

For the intercompany orders, we have created additional roles that would grant a user access to both companies 00010 and 00020 and the branch plants within them. We give these roles only to the users that would interact with the intercompany orders, but there are a lot of them. Order entry, shipping, receiving, etc all need this.