Data security management to control access to ERP capabilities and data