How does a company add, edit or remove a work restriction for a cardholder?

How does a company add, edit or delete a risk assessment for a cardholder?