The roles will be configured basis business. One business should not be able to do any kind of operations (CRUD) on other business data. This may not be achieved using only