Create Custom Role to access specific supplier invoices

Summary:

Hello,

How do i create a custom role to access specific supplier invoices and also make other users can't access this supplier invoices.

Can we do it through Data Security Policy?

Thanks

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):