What do I have to do to ensure that commission statements are only visible to certain users?

Restrict viewing rights for commission statements.

Grant the IG B2B "Provisioning" authorization under "Central area" only to individuals who are authorized to view the commission statement.