how can i ristrict role for manager and employee under ODA

How can we ristrict employee from certain privlages that are meant for manager role. for example, manager should have privalage to promote his employee whereas employee shouldn't .

The employee should be able to view the employee specific ODA queries in the ODA instance. However the employee can view reports, promote options which are specific to HRBP and Managers.There should be priviledges based on employee and manager view only .Please help us on the employee and manager access view and provide the resolution.