In a role, a specification that limits the dimension members or cube cells that users in the role are permitted to access.