How to restrict sales order view/edit access by Legal Entity within the same Business Unit

Summary:

Our users should only see and work on sales orders that belong to their own Legal Entity, even though all orders are created in the same BU. For example:

• User 1 (LE A): can view, create, edit, and submit orders for LE A only. Orders for LE B and LE C should not appear in Manage Orders, search results, or reports.
• User 2 (LE B): same restriction, for LE B only.
• Manager / Super user: can view and edit orders across all LEs in the BU.

The restriction should apply to:

Searching and viewing orders (Manage Orders, Order Management work area, Overview page)