I want to restrict security console for certain users for their business unit only?

Summary:

We have a requirement that a particular user has got access for security roles to be applied for the business unit or legal entity he/she is in.

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

26C

Code Snippet (add any code snippets that support your topic, if applicable):