- deny access to users that don't belong to 'helpdesk' group - filter results based on account provided