Restricting locations using location sets

Summary

Want users to have access to a specific set of locations

Content

Hi, 

We have a requirement for there to be locations which belong to a specific set and only users who belong to that BU can view those locations, much like the attached picture from the Oracle implementation guide. 

However, the guide does not have much detail on how to implement this. For example, does this need to be tied in to an organisation security profile?

I have created a user within a BU and some locations in different reference data sets, my intention was that this user would only be able to see the common set and the reference data set for which they belong to, however they can see the other reference data set also.