You can't grant access to employee record anything other than what they have