Roles and Privilege required for AP invoice CReation using REST and SOAP Webservices

Summary:

What Roles and Privilege required for AP invoice Creation using REST and SOAP Webservices

Content (required):

We need to create user who will be able to create AP invoices through REST API or SOAP Webservices.

What all roles and privileges should be assigned to that user. He should not have any other access in the system apart from create/modify/view invoices.

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):