How can I set the scope of the employee security profile based on AOR to be department and location

Hello,

We need is for a user to see only the employees in his/her own location and department and make transactions for these employees. For example, to initiate a promotion. For this, how can I determine the scope of the employee security profile based on areas of responsibility, department and location?

Regards.