Understanding user area and role hierarchy restrictions