We need to have a user access to a specific task only and no access to setup and maintenance

Summary:

We need to have a user access to task "Manage Withholding Certificates" .
We need specific role or method to assign this access to user .
We DO NOT want to provide access to Application Consultant Role to the user .
Only specific access to task -Manage Withholding Certificates

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):