A web user associated with a specific CommTrack program can only visit reports automatically filtered for his program/location. You can do this either on the Invite Page or on the Edit Page.
Option 1: When you create a new web user under Users Tab, you have the option to 'Restrict Web User access based on location'. Make sure it is tickled. Click on 'Invite Web Users'. An email invite would been sent to you and the invited person. Once the invited person confirms and accepts invitation, he/she would show up on the Web User page.
In our example, once you set the Program associate with oddmilk.test@gmail.com to be MCH, this web user would only have access to reports and data associated with this Program.
Option 2: blocked by active bug