Hi

It seems like you are validating the sanction level for user profile.

Categorise the functionality against user level and test those functionality

Find the functionality between each users ans segreate them accordingly

Eg : Junior - Access to primary level
Senior - Access more than primary
Manager - Access to primary and subsidiary

cheers,
Sridevichitthu