Control access to data by user class

[Bluebird]

Happy 2007 everyone.

I have searched course material and available documentation but cannot find out how to set up the following. 

I have a Report Studio report that is master (sales reps)/details (sales invoices).  The boss and me, as system admin, need to be able to see all sales reps and their invoices which is what happens now.  What we would like is that when a sales rep logs on, they can access the report and run it but only see their sales invoices and no one else's.   I am using Active Directory and CRN v 1.1.  At the moment all the sales reps have their own individual log in to the system and all are individual members of the Consumers role. 

This was easy to achieve in Impromptu but I need some pointers from the gurus, please!

Thanks, BB

[sir_jeroen]

Have you looked in the FM documentation? Take a look @ it... it's there.