Restrict Access to Certain Organisational Units in AD

I am new to AD and have been asked to restrict access to our canadian helpdesk to only be able to amend details of users under the canada organisational unit in AD currently they can see all countries. Is this possible? If so How?