Hi All, I'm trying to restrict users (or users in groups) to view entities only in specified domains. From what I've read this is possible through the Policy setting, but all I've tried so far hasn't worked. Has anyone got some form of explicit directions or screenshots indicating how to implement this?

Hi Dave, did you check the roles docs here https://datahubproject.io/docs/authorization/roles/#roles-setup-prerequisites-and-permissions

You probably need the view entity metadata privilege for domains as well?

Thanks @astonishing-answer-96712 and @better-orange-49102 for your responses. I went back to review the docs as suggested, but my permutations arent given me the required effect. The first image below showing the domain I want to restrict entity views by a particular group of users to. The second image shows a user in the group trying to view the domain resource page, but coming up unauthorised, BUT if I can view entity metadata for datasets assigned to that domain as shown in the third image. I believe there's something I'm missing, but I've poured over the docs multiple times, but haven't found it yet. Any help would be greatly appreciated.

I can take a look here

Thanks John, I'd really appreciate that.

Hi Dave I am also experiencing this problem! Open to any solutions