Read only access for few business units and Create/Update access for remaining Business units

Summary:

Hi Experts,

Our client organization is in the process of selling a few business units to a vendor and needs read-only access for the existing finance users regarding these units.

Currently, we have two custom AR roles: the Operations Role, which allows for creation and updating of transactions, and the Analyst Role, which only permits viewing without any creation or updating privileges. Currently, users hold the Operations Role, granting them data access to all existing business units. We’ve removed access to the selling business units from the Operations Role and assigned the Analyst Role to these users, which includes access to the selling units. However, users are still able to create transactions for the selling business units.