Generally, grant users access only to the employees and positions in their entity parent. For example, specify that planners can view and modify employee and position information only for their department or cost center. Also, grant access to all unspecified members in each dimension, such as Unspecified Position or Unspecified Element.