I am looking to create a HR group where they can handle employee investigations, and other sensitive information. However, I don't want other ITIL users (ex. service desk) to view these requests. I ideally, I want only HR staff and Admins to be able to look at these requests. All other group should get access denied. I am a beginner developer, so I am not a coding wizard. Any thoughts on how I should go about this?
