Secure creation of customer when the type is person

Summary:

We have two type of customer records, organization and person, we would like to restrict the creation of customer type person for specific users. Which are the options from security perspective?

Content (required):

We have two type of customer records, organization and person, we would like to restrict the creation of customer type person for specific users. Which are the options from security perspective?

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):