The Entity ID of the supplier or customer can be assigned to a user profile to limit secure access only to the transactions related to them.