If a form field set to select a User — an Annual Leave form, for instance — is showing contractors alongside your own employees, nothing is set up wrong. Here's what's happening.
Direct Users — your own employees, supervisors and administrators.
Indirect (Contractor) Users — people who belong to contractor companies connected to your portal, with roles such as Contractor Admin and Contractor Worker.
Not everyone in a contractor company works on site — a Contractor Worker attending your site needs inductions and documents, while a Contractor Admin may only manage their company's account. Both are users in your system.
When a form field is configured to select a User, it currently includes both direct and contractor users, because all of them may potentially perform work recorded in your system. There's no setting today that limits a User field to direct employees only.
If a form is internal-only (like leave requests), brief the people completing it to select from your own staff — the contractor entries don't affect the form's function.
If an employee-only filter would matter to your workflows, lodge it on our feature request board at feedback.worxsafety.com.au — requests there are tracked and visible.
Seeing contractors in the list is not a sign your contractors were set up incorrectly.