R12 Security Setup translated into HCM cloud

Requirement:

The security setup is characterized by 3  main drivers:

1.       Access to view all employee records across the organization

2.       Access to Transact on  Employee records based on the organization structure  

3.       Access to Employee Salary /Compensation information based on the role 

Problem Statement

Thus far, we have not been able to achieve the business requirement of viewing all employees within the organization and  restricting transactional activities based on organizational structure and then further limiting access to compensation/Salary information based on the role.

From an HR Perspective, this is a common requirement. Could you kindly provide insight on how other clients have solved this issue?