You can define roles based on authority. For example, a user can only see his own call logs, or a different user can only export etc.