jfree_1

I am working on setting up users in Jaspersoft for our client organization. I understand the different roles such as role_user and role_Admin etc. However, I am looking to restrict user access further by location. For example, if our one client has 250 locations setup in our database and they want to give one user access to only see data for 3 of those locations how do I go about granting that access to those 3 locations? Is it something on the user attribute tab?