How to avoid a technician with the “EnableCMDB” role to see CMDB items of all accounts instead of associated accounts.
Default Role “EnableCMDB” the technician can see all the CMDB items of all accounts. Along with the EnableCMDB role, you add a custom role with the Technician Allowed to View set as All in associated Accounts