I have a group of users in Service Desk that do not need to have access to or visibility of any incidents other than those assigned to the group(s) they are members of. They should not be able to search by incident number unless the incident searched for is assigned to a group they are a member of. Short of data partitioning (which is not practical in this instance), I am not finding an answer.
Has anyone successfully implemented such a role that is willing to share?