Network Zone/Fulfillment network users get roles scoped to our institution zone by the role assignment rules, which makes it appear that they have access to user and financial and other data of our institution, even if they don't.

I propose changing the behavior so that users who are not local, and from another institution are ignored by the role assignment rules.