Is is possible to separate the actions to position with data security policy

Summary:

The customer requires the ability to separate the actions under position with Data Security Policy :

Role1: Correct/Update Position

Role2: Create/Duplicate/Delete Position

We have a custom role that was created based on the standard Human Resource Specialist role.

Navigation path:
Tools > Security Console > Custom Role > Data Security Policy (Create stop in the train)

Is it possible to define or restrict these actions separately in the data security policy configuration?
Any guidance or examples would be appreciated.

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

25B

Code Snippet (add any code snippets that support your topic, if applicable):