Hello,
In my UoD each Employee(.id) has Permission(premLevel). permLevel value range is {Organisation, Region, Country}, and each level contains the lower ones (e.g., with Organisation permLevel an Emp has access to empData only in her Organisation, with Region permLevel you can access empData that is accessible for Organisation permLevel ...