Restrict user access to application UI and seeded reports only to the particular LE / Ledger / BU

Summary:

Restrict user access to application UI and seeded reports only to the particular LE / Ledger / BU

Content (required):

In our existing setup of 6 LE / Ledgers, two new LE's need to be defined in the system. However access to these two LE / Ledgers need to be restricted to only a few users. Both application UI and seeded reports should only allow transaction entry or show data for the ledgers for which access has been provided.

Subledger access should also be restricted to the particular BU only.

Is this possible ?

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):