Add security who can access expense report attachment on UCM without providing admin role

Summary:

Can we add security to access only expense report attachments of specific business unit without giving admin role to the user?

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):