Not able to restrict Employees from creation of DOR for particular document type

Summary:

Client requirement: For Document type: passport, only HR can create the create the DOR employees can only view the document.

To achieve this requirement, I did the following setup in Document type

Then I logged in as the user who has "Admin Human resource Specialist Custom" role. My client group-> person management -> select particular person -> Document of record -> add -> Document type= passport. I am getting following error.

How can I achieve this requirement?

Content (required):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):