You can create restriction groups to assign to restrictions applied to organizational units and risk categories.