Separate access for certificates and salary documents

I want to be able to separate access permissions for employee documents. Specifically, project managers should have access to course certificates (kursbevis) and certificates (sertifikater) without having access to sensitive information like salary (lønn) or payslips (lønnsslipper). In many industries, it is essential for project managers to verify qualifications, but they should not see private financial documents. This should be handled through more granular access levels or separate categories.