Encrypting data by user and group DC

i join truenas scale with active directory domain controller and shara with user and group on windows server, i need encypting data with user or group department only and Not allowed any IT Admin for read data