is there a way to constrain it such that the

creator

at the time of checking

update

must be a part of the business unit?