RBAC custom condition

With the Enteprise subscription, can one allow specific criteria on top of roles?

Is the Enterprise version only cloud based?

Let’s say I have a sales person that should have access to their sales (orders). The buyer should also have access to the same sales (orders).

I don’t want buyers/sellers to have access to other orders, would this be possible?

Many thanks

TIA