Creating Isolation Groups and Assigning them to Users 
With an isolation group, a user is limited to interacting with objects of the same isolation group as well as objects from the GLOBAL isolation group. You assign users to isolation groups in the Security section in the navigation bar. The user must either have the role scheduler-isolation-administrator or a custom role granted which has the redwood.com/ManageSchedulerIsolation action to be able to add users to an isolation group. Users can have multiple isolation groups; in this case, the user needs to choose an isolation group for the session during login.
Note
In the Free of Charge version, only one SAP client can be in an isolation group. This is governed by the value of the ProcessServerService.SAP.limit license key.
Prerequisites
the user needs the role scheduler-isolation-administrator or a custom role granted which has the redwood.com/Scheduler.AccessScheduler action.
Procedure
Create an isolation group
Navigate to
Security → Isolation Groups 
.Choose New from the context menu.
Enter a name for the isolation group. Names should be all upper case.
Choose Save & Close to exit edit dialog.
Assign an isolation group to users
Navigate to
Security → Isolation Groups .Choose Import Users
Use the search dialog to locate users from the Authentication system, wildcard * and ? are allowed.
Select the users to import and choose Import.
Close the window when you are finished importing users into the isolation group.