you'd want to limit what sections of the activities they can see. Basically, you can tailor what activities Elsa shows them based on their permissions. you'd have to make a Custom Activity Provider that checks who the user is and what permissions they have. Then, alter the part of Elsa that exports the list of activities it has access to so that it knows it should use your CAP and only present the user with activities they're allowed to have. Finally, tell Elsa to actually use this new device when it comes out. That way, everyone just gets to view what they should be viewing, so it stays safe and organized.