The keyword assignment provides the selectables for groups and roles from the person.
For example you might have the following Foolean expression filter.
organization match context.user.assignment.parent
This evaluates to true for data allowed for a user’s Organization. For more information, see Add Business Object.