Data restrictions for IT Security Manager Role

Content

As per the requirement I have created a custom role based on IT Security Manager seeded. role. There should be data restrictions for data roles based on legal entities of the group. 

Ex : After assigning the role user in legal entity x can not search a person in legal entity in Y to reset the password.

I have applied data restrictions using Organization Security Profile and Person Security Profile based on legal entities. 

After applying the role to the user , user can see  the records of users in other legal entities also. I have created few another custom roles using same Organization Security Profile and Person Security Profile and it works perfectly.