Security Exclusions: can it be created by worker type?

Summary:

We are creating a separate worker type for a group of physicians. We will need to add a security profile with an exclusion so they can only see specific people in the organization. We need to understand the types of exclusion rules we can create. 

1. Can we create them by worker type? Ex: can only see contingent workers, contractor type.

2. Can it be done by cost center? 

3. Can it be done by Application role? Ex: can only see people with Contingent worker role

Content (required):

Security Exclusion options

Worker type exclusion

Version (include the version you are using, if applicable):