Splunk interview question

How do you restrict users and application partners to use specific data?