It is also possible to further restrict access by creating user groups with the same user profile. This allows for:

• a coordinator of service 1 may not be able to access application files that concern service 2
• a coordinator of service 2 may not be able to access application files that concern service 1

This setting is easy to modify and adjust over time for a user with an "administrator" profile or a "manager" profile (only two profiles have access to this part).