How do I grant user access rights to only a limited number of legal entities?

Make sure that a user/user group can view or edit only one or more specific legal entities instead of all legal entities.

If you want to prevent users from having access to all legal entities, follow the steps indicated below.
 

1. Create a new user role without 'View all' and 'Edit all' permissions.

Define the permissions of this user role. Make sure the check boxes 'View all' and 'Edit all' are NOT selected. 

2. Assign this role without 'View all' and 'Edit all' permissions to a user.

Assigning a role without 'View all/'Edit all' permissions to a user effectively deprives that user of access to any legal entity. The set permissions of this role are therefore not applied to any legal entity. 

To grant this user access to one or more specific legal entities (within the scope of the permissions defined in the role), see step 3 below.

 
3. Grant a user or user group access to a specific legal entity
Go to the 'Settings' of a legal entity and click on 'Permissions'. Add one or more specific users/user groups that can view/edit this legal entity.
 

In case a user group is added as viewer/editor of a specific legal entiy, make sure that each user of that user group has a user role without 'View all' and 'Edit all' permissions.

* * *