In addition to using business roles for assigning general access to work centers and views, you also have the option of restricting read and write access for users to whom a business role is assigned.
Authorizations for certain views can be restricted either to employees or territories associated to the specific item in a view, or via assignment of the employee to an organizational unit. Products can be restricted using the employee's sales data.
Click on each icon to learn more about access rights and restrictions.