an Entity references as follows:
A restriction defines boundaries on values that can be scoped to users, groups, or the whole system.