Restrict employee to view only those employee data who works under him

1

I set an employee create permission user to 0 so that he can view employees records who reports to him, his role is just leave approver and employee but he can see every employee data. How to correct this

2

create user permission should have been 1