Sync linked asnad into CRM, filter by group/kind/metal, and require the tahesab superadmin module plus reports role access.