Custom Role which able to create Invoices with matching PO's and restrict the user edit invoice

Summary:

Hi there,

I have one requirement; business wants to create a custom role for creating AP Invoice by matching PO's and restrict the same user by modifying that invoice. User able to create invoice and restrict from actions like Cancel Invoice, Delete Invoice, cancel lines, add lines, modify line etc.

Checking any suggestions are there for meet this requirement.

Thank you,

Mahaboob Basha

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):