It is also possible to go further in limiting access by creating groups of users with the same user profile. This so that:

• a coordinator of service 1 cannot access application files that concern service 2
• a coordinator of service 2 cannot access application files that concern service 1

This setting is simple to modify and adjust over time for a user with an "administrator" profile or a "manager" profile (only two profiles accessing this part).