Your customer has a Human Resources knowledge base, which is only accessible to members of the Human Resources department. A new procedure regarding employee quarterly reviews needs to be published…

Adding a script to the Knowledge Base's 'Can Read' list would apply the restriction to *all* articles in the entire HR Knowledge Base, which is too broad for a specific category's requirement.

By adding User Criteria for the HR Manager Group to the 'quarterly review category's' Can Read list, all articles within that category, including the new procedure, will inherit this restriction. This ensures that only HR managers who meet the criteria can view content in that specific category, providing an efficient way to manage access for a logical grouping of articles.

While Access Controls (ACLs) can manage record access, User Criteria is the designed and preferred method for controlling read access to knowledge articles and categories, offering better integration and management within the Knowledge Base framework.

Adding User Criteria to the individual article's 'Can Read' list would restrict that single article, but applying it to the category (Option B) is a more scalable and maintainable solution if the entire 'quarterly review category' is intended for HR managers.