Is it possible to restrict access within the Security Console to Defined User Groups

Summary: Security Console Admin with Exclusion Rules

We are attempting to create a custom role for a third-party support team with permissions to lock and unlock accounts via the Security Console but prevent their access to the lock and unlock the internal Oracle Admin team.

I have created an exclusion rule that removes access to our department and applied it to the Person Data Security Profile of the new custom role but our Admin users are still being returned in the Security Console search. Is the user profile not restricted in search because that security criteria (in this case Department) is associated with the worker profile, not the user profile?