I'm looking for a way to restrict access to certain types of records based on their metadata. Basically there are some types of files that all employees in a team should see, and some they shouldn't (ie in terms of HR records, anyone in HR should see basic records, yet only the managers and investigation team should see complaint records).
I've had a look into sensitivity labels and this doesn't seem to be the right fit (although I could be wrong!). Is there another way to do this? How would you restrict access to a single 'type' of file in sharepoint?