How to restrict a role to only create/maintain ship-to sites, not bill-to sites

Summary:

The finance team does not want the customer service / order entry users to be able to create or edit bill-to sites or any customer profile information. They do want to allow for ship-to site creation. Can a custom role be created to support this?

Content (required):

Finance wants to control the account and bill-to site creation and edits. They want to allow customer service to create and maintain ship-to sites only. Is this possible?

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):