restrict transactions by Legal Entity inside one Business Unit

Summary:

we have one business unit

however, more than 10 legal entities are using the same Business Unit

we would you restrict user access to by legal entities

e.g User A only can see transaction/Receipts of entity 1,2, 3

and user B can only see transactions/Receipts of entity 4,5,6

please note we have implemented segment value security feature, but it only restricts on the distribution level, the users still can see all the transactions (Heads and LINES) of all the entities inside the Business Unit

and allocate receipts to Invoices which belongs to All the legal entities

Content (please ensure you mask any confidential information):