hey guys thanks so much for responding to my question here I want to kind of show this video because I think I'm still not explaining it correctly so maybe this will help out here what we see here well let me show you the I tell user first so the ITIL user under the configuration application has these modules the only one I really want them to see is the base items all so they can kind of see what assets are in stock this is just dummy data from the out of box I don't want them to see this CMD V query builder view or service for you so if I switch back over to the modules of the administrator what we see here is that the CMD query builder is got the CMD query builder role associated with it so the suggestion is that we just go ahead and restrict that by pulling it out and only adding people who need it the issue I have with that is I don't really know who's gonna need it in the future so I'm trying to not cause a cascade of trouble down the line if I take out CMDB query builder then everybody gets access if I put in a dummy group nobody gets access except for that dummy group which is fine but again I really don't know who's gonna need it so what I'm really trying to figure out is is there a way to just restrict my ITIL user from seeing this but allow you know everybody in future everybody's or maybe everybody who currently has CMDB query builder to access it and as far as CMDB query builder that role is inherited into the asset role which the asset role is required for them to see the base items at all lists so it's kind of catch-22 it can't take these away it seems like without taking this away so that's kind of my question I hope I explained a little bit better if not I'll continue to try thank you