To ensure a user can only assign Observations to other users within their same company (regardless of the other user's access level), you must select the following permissions:
Assign Observations to Users in the Same Company
Can Assign Standard and Eligible Read Only Users to Observations