We have several different MDM domains in our MDM solution. I also have some users who need to have entity edit access in one domain, but view only access in the other domains. I have also set up different groups for the different domains to control access.
However, I have found that if the user has the MDM: Business Usage role applied to one access group for that is assigned to one of the domains, they have edit access to all of the domains. I assume this is because MDM: Business Usage applies across the board.
Is there a way I can set up access to allow edit for one domain, but view for the other domains for a single person?