Recommended Security Approach for Multi Org set up

Summary:

For customers having multi-organization structure in Oracle HCM, what is the recommended approach for security role.
EG: For HR analyst role restrict based on LE using different security profiles (Either AOR or Using query or org tree).

Or is there any other centralized role approach that allows controlled access across multiple orgs?

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):