Question on Demantra security

Hi, expert,

I have one security scenario, not sure how to set it up in Demantra

User A is in charge of sbu S, and there are 2000 ship-to under sbu S as lowest level, 500 ship-tos user A have read&write access, and another 1500 ship-tos, user A have read only access. And there is another sbu T, there are 1000 ship-to under sbu T, user A can access only 1 ship-to under sbu T with read&write access, other 1999 ship-tos, user A have no access. not sure is it possible to set it up in Demantra, please advise

As I tried, I filter 2 SBU first with read&write access, after that, I think I need to move total 3000 ship-tos to selected panel, and it is not allowed, the max number I can select is 999. Also, assume I can move all 3000 ship-tos to selected panel, it's very hard to set read write access for 3000 ship-tos one by one. please advise, thanks a lot