Example
Payroll staff can manage payroll data, while line managers can view only authorised information about their current team and cannot change bank details.
What to keep in mind
A role can still be too broad. Review permissions regularly, remove outdated assignments and consider additional restrictions for particularly sensitive records or actions requiring separation of duties.