Restrict user from editing/correcting accounting distributions

Summary:

Which roles/privileges I can use to restrict a particular user from editing/correcting the accounting distribution?

The user should only be able to review the accounting.

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):