Limitations to roles

Security is enforced for objects at the role level. For example, a supplier role can adjust any actual value. Users within the supplier group can edit all objects. The supplier group itself does not distinguish which individual objects a member can update. Access to objects by user is not restricted.