Document of Record - How can we set the user authorizations for each document type?

Summary:

How to manage document authorizations based on document type

Content (required):

Hello,

our client wants to configure 20 different document types:

• for 5 of them wants to give to HR and Employee users the possibility to create, edit and delete the document type
• for 10 of them wants to give to HR users the possibility to create, edit and delete document type and Employee users can only see the document
• for other 5 wants that HR and Employee users can only see the document type but they can't edit, create or delete them

What is the correct approach to manage this type of configuration? Where can we set the user authorizations for each document type?