How can I restrict users from entering manual entries to secondary ledger?

Summary:

Content (required):

I want to restrict users from entering manual entries into the secondary ledger without customizing Job roles. I only need to flow entries from the primary ledger or sub-ledgers.

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):