Security assignments are defined by the Roles and Rights that are assigned to each user.  Rights determine which events the user can access (set by Facility, Department, Category, Phase, Severity, and Confidentiality of each event).  These rights can be restricted to allow access to a specific facility, child-facilities within a facility, or all facilities, and also to a specific department, child-departments within a department, or all departments.