OTL - opening and editing an approved timecard

Summary

Is there a way to set up in Fusion (19A) where only the HR Administrator can open an approved timecard? Don't want the employee or manager to have this ability.

Content

We are currently converting to Cloud OTL. I need the option as an HR Administrator to have the ability to open and edit timecards in approved status, but the employee and supervisor/manager should not have the ability to open/edit approved timecards. Please provide set up if this is available.

If the timecard is in submitted status the HR administrator, employee and supervisor/manager would have the ability to edit and resubmit.