HR Role with country AOR, but need restricted data access to a certain person type

Summary:

New HR Role

Content (please ensure you mask any confidential information):

Hi Team,

We need an HR role for Country X that provides visibility and ability to transact on all employees within it, excluding those with Expat person type.

What is the best way to implement this requirement. Suggestions are very much appreciated.

Thanks.

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):