I need specific privileges to create a custom role from Accounts Payable Specialist

Summary:

I need specific privileges to create a custom role from Accounts Payable Specialist, where it restricts users from cancelling the invoices and releasing the holds.

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):