Data Restrictions TabData Restrictions TabYou use the Data Restrictions tab in the Security Groups (SP) application to set restrictions on what records a group can access within the larger set specified by the privileges you grant on the Applications tab.
You can specify which records members of a group can access. You do not use this feature to restrict access to applications and menus, or to prevent a user from entering data; you control those privileges from the Applications tab.
Object and attribute restrictions can be made conditionally using conditions created in the Conditional Expression Manager.
For example, you might want to restrict a maintenance group so that they only have access to their own personal information or to the labor in their same craft no matter what application they are using to access the information.
The Data Restrictions tab contains three tabs:
Object Restrictions - to enter a restriction that applies to an object, such as a database table or view.
Attribute Restrictions - to set a restriction on one database field.
Collection Restrictions - to set restrictions on collections of assets, locations, and configuration items.
Certain data object restrictions are related to customer authorization for security groups and are created automatically based on the settings on the Customers tab in the Security Groups (SP) application and the settings in the Customer Objects (SP) application. These restrictions are displayed on the Data Restrictions tab as read-only.