Organization security profile not working as expected.

Summary:

Hello experts, I've configured an organization security profile to restrict visibility to only 2 Legal Employers using an Include Condition. This profile is linked to a job role (HR person) and assigned to an employee. However, despite these settings, the employee can still see all legal employers in the list.

According to Oracle documentation, the Include rule should display only the listed organizations (Legal Employers). I've followed the necessary steps, including running required processes and defining organization criteria in the Org Security profile, but it's not functioning as expected.

Could someone please advise if there's something I might be overlooking?