Access rights app allows to manage the access to data by employees in your OneBox.
You can create access groups for every department or role and then configure the custom rights for every group created. You can set the following in the access settings: which apps are available for employee, which information he can see/add/edit/delete within the app.