Next Gen Employee able to edit Primary contact and select any employee for request

Summary:

Next Gen Employee able to edit Primary contact and select any employee - should only be able to select direct reports

I have added only Next Gen Human user helpdesk privilage to our custom Employee role

It was not happening in Classic.

Can anyone please assist?

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):