How do I restrict account records based on business unit?

Create a custom role that restricts access to accounts, and then create an access group to grant access to members of the group based on business units.

Note that access groups don't restrict access. Rather, they give access based on conditions in rules.