The MQL Formula syntax for defining a user or role row constraint is:
[table.column] = "row"
The table and column are defined as part of a metadata business model. Here is an example that isolates access to data from the Sales department:
It's also possible to give or deny access to an entire role, or a single user, by selecting that user or role, then using a boolean for a constraint: