text: **6.3 Data separation**
  
  Content Manager OnDemand allows the separation (compartmentalization) of the 
  organization’s data into multiple separate partitions. Specific groups of users can access only 
  the partitions that contain data that relates to their operations. The separation of data can be 
  at the system level, the object server level, and the archive server level. 
  
  **6.3.1 Multiple systems**
  
  The organization’s data can be spread over two or more separate systems. As illustrated in 
  Figure 6-2, User Group A can access only Content Manager OnDemand server A and cannot 
  access any other Content Manager OnDemand system or any other Content Manager 
  OnDemand data. If necessary, you can create a super user group that can access multiple 
  systems. 
  
  System access restrictions can be implemented by one or more of the following means: 
  
  (cid:2) A web server. 
  (cid:2) Firewalls, switches, or other network devices. 
  (cid:2) Only the correct user group is authenticated to use the system. 