Authorisation groups are set up with authorisations per function. Users are then linked to authorisation groups, either general or per company.