Can we create based on assignment category data security role

Summary:

we need to restrict the data from other BU's data and same business unit HR also not able to see other divison(central.head office) employees.

if we can restrict based on assignment category or divison please help me on this issue.how can we create data security role

Content (required):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):