Restrict data based on role

This feature may also be relevant for multi-tenancy purposes.

E.g. you have different profile attributes for multiple brands.

Brand A has Interest 1,2,3

Brand B has Interest 4,5,6

Of course it could be completely different attributes as well which are only relevant for specific OUs and should not be shown to others.

If you want to restrict the sensitive data, you can store that in a custom schema and assign this to a Org unit which the user's group is not part of.

It works only if the link is a 0-1, not a 1-1 (in this case, all profile data won't be accessible by someone out of the org unit).

What happens to the tracking or delivery logs ? With the Multi-Tenant setup, will the logs be also restricted for each of the country users ?