Based on position based, we (GRC) provide role based on position so all employees under the same department and position will be obtained SAP role so that we cannot provide role to some users due to it is very difficult to maintain role if we control as user level.