Agents can create restriction groups, assign restrictions to them, and apply them to organizational units and risk categories.