Our goal is to get our end users the information they need to manage the expenses of their department. Users are restricted to GL accounts based on their department. It would be helpful for them to be able to open the invoices that are posted to their account so they can better understand their expenses. However, we have sensitive data that is processed through AP/invoices that we don't want them to be able to see all invoices. Is there a way to to allow access to invoices through drill down link within the GL account but not allow access to the AP/Invoice module?