Restrict Access to Oracle HR Application data only when allowing and using Security menu

 We are in the process of reevaluating our Oracle user's access to the Oracle HR application.   In doing so we (IT developers)want to allow certain users the ability to add/define new custom responsibilities and exclude functions and/or menus just like we currently do via the Responsibility submenu within the Security menu, however, in doing so we also want to restrict them to only view/change/add Oracle HR application data.  In other words we do not want them accessing any other Oracle application data (i.e., General Ledger, Payables, Projects, etc.) outside of Oracle HR.  What is a way or option for addressing