Currently, the role to update an existing employee has visibility to all the details of an employee. Is there a way to create a new role such that senstive data is not displayed/visible ?