create privilege removal for accounts payables

Hi,

As per audit requirements, our finance manager should not be able to create the entries (invoices and payments) for accounts payable module.

Please advise how can we customize "Accounts Payable Manager" role so that role retains all other privileges but create entry invoice and create payment privileges are removed.

Thank you