In FM, when you create a security filter, you apply it to a query subject, and the add teh groups and roles to which the securty filter will be applied. For each group or role, you can create filter expression that will be used to filter data for that group or role. These filter expressions can incorporate macros, parameter maps and session parameters.