At least as far as I understand, in the USER type of field, you can always select ANY user from your organization.
Including users that don´t have access to the table.
It would be quite interesting if the field could have filters by ROLE.
So in a table about sales, when having to select a salesmen, only people from the group/role SALES can be selected, not the woman from HR or the Janitor.