Yes, user access and permissions can be defined at any level of the organizational hierarchy, which is customizable. For example, a user could have access to invoices related only to their department within one of the legal entities managed.