Restricting visibility between users and things in the organization
I have assets and users with visibility set to the same organization. As I understand all user from the organization can see all assets. I have requirement that every user could see only some subset of assets from the organization that is configurable run-time. How I will achieve this? Should I create for every asset user group, say, <AssetName>_DisableAccess_Group, put users why are not allowed to see asset into this group and configure run time permission for asset disabling all read/write, execute, subscribe operations for this group? Or there is another way to achieve this?
Thank in advance,
Vladimir Medvedev

