@stale-judge-11647 I've used permissions for this. In roles I just use a single role for all users, however I construct roles using permissions. So, I would have a Director Permission (condition being access to records they are a director for), Shareholder permission and so forth on all tables. This way there is some consistency in understanding the Roles/Permissions structure for the app.