"Restriction data may include items such as amount limits, account or ID numbers, or a user's manager." . . . . .