I'm using GRC Entity Based Access (EBA) and want each entity owner to see only their own entity and the entities below it. I can't find an OOB way to hide the entity records themselves.
Example
Networking (owner: admin)
└── Network Operations (owner: Tim)
└── Data Centre Networking
Cybersecurity (owner: admin)
└── Security Operations (owner: Mark)
└── Threat Monitoring
I would like Tim to see only Network Operations and Data Centre Networking. He should not see the upstream entity (Networking) or anything under Cybersecurity and Mark should have the same restriction for his branch.
I have configured Entity based access and here is the result :
- Risks linked to the upstream and other-branch entities are restricted correctly.
- But All six entity records are still visible to both users.
Is there an OOB way to restrict visibility of the entity records themselves, so an owner sees only their own entity and its downstream entities or the customization is the only option.
