Using groups, we can control which users can access which functionality and apps
There are several apps:
Enterprise Search
Storge Monitor
PII (GDPR)
PCI
Metrics (user usage)
DSAR
Each app can be locked down to a specific set of groups, or even specific users.
Here you can see have given all Aiimi users access to search, but limited access to PII to the PIIUSERS group.