When a Nakisa role is mapped to an SAP role, does it limit the data that the person who is running that role sees? For example, if an employee logs in and is assigned a "Employee" role, is it possible to limit the org chart that the employee sees to only his org unit and below?