Currently - you have to EXCLUDE departments from legal entities - i.e. 2 entities Co A and Co B. To restrict the departments that Co A can see they have to be excluded - i.e list all Co Bs departments. We have 100plus companies and some 1000 departments across our group - hence having to enter so 100,000 restrictions-

would it not be better to reverse the current logic and make the rule an ALLOW - i.e. which departments an entity is allowed to see - this would signficantly reduce the maintenance of the system - requiring 1000 entries - also if you set up a new company - then only the departments they use need to be added - as opposed to restricts all other departments from this entity and having to add the new departments to ALL the exixting entities??