How to only allow a user to edit his/her own users? For instance, my site contains two roles:


employer.
company.


Every company has to be able to add, edit and delete there own employees. 

As you may understand, companies should not be able to edit or delete users created by other companies.

How can I achieve this?
The Organic groups module (as already suggested in another answer) is indeed a possible answer to your question. But you should also have a look at the (fairly new) alternative for it, which is the Group module (with it roots close to where Dries started Drupal ...). Some more details about it (from its project page):

Organic Groups allows content itself to be groups, which isn't always what people want. It relies on an entity reference field to keep track of the ties between a group (node, term, ...) and its content (node, term, user, ...).
Groups instead creates groups as entities, making them fully fieldable, extensible and exportable. Every group can have users, roles and permissions attached to it. Groups can also act as a parent of any type of entity. Seeing as a group itself is also an entity, creating subgroups is very easy.

Even though it only has a beta release for D7 so far, its Usage statistics seem to indicate it is like a &quot;rising star&quot;. And I've heard it mentioned recently in various occasions as a valid alternative for the &quot;heavy&quot; Organic groups module.
The Group module also integrate nicely with the Rules module, as explained in comment #2 of issue 2603136, which states the following:

... you can already use Rules to:

Add a new Group
Create a new GroupMembership and save it (the equivalent of $group-&gt;addMember())
Add or remove a GroupRole from a GroupType
React on new GroupMembership or Group entities
…

What hasn't been done yet is custom Rules actions or conditions. Seeing as 90%+ of Group is pure Entity API CRUD-operations, there has been no custom Rules code yet given how much you can already accomplish out-of-the-box.
Useful Rules we may add could be:

E-mail all members of a Group, optionally filtered by GroupRole
Easier-to-understand labels for the above list: &quot;Member joined group&quot; sounds easier than &quot;GroupMembership entity is created&quot;

...

Refer to Integrations with other modules and its &quot;Related issues&quot; about other modules for which integrations already exist, or are in the pipeline.
PS: Refer to How to implement an option for users to limit access to nodes/comments to users with the same role while posting it? for an interesting illustration of how this module can be used.