Can we apply Security rules at Operating unit level to Segregate the data

 Hello all, 

As per the business requirement , the customer don't want to create a separate Operating unit to segregate the data b/w Legal entity values . 

So leaving vendor restriction , we are trying to achieve security at Invoice and Payment levels. 

So in this Scenarios , as per research I tried to create a Data access Set  for few Le's values and assigned to the Payable's responsibility . 

The following profile options have been assigned : 

a) GL:DATA ACCESS SET 

b) SLA :Enable Data Access Security in subledger 

c) SLA:Additional Data Access Set

After this expectation was : 

When I enter any invoice for this responsibility it has to restrict all those BSV values except the one in the Data Access Set .