Two Supplier Custom Roles need to be created

We need to create two custom supplier roles to achieve below requirement:

• Group A: Someone who can add a vendor but cannot enter or update banking information. (User X) 
• Group B: Someone who can only enter banking information which should require an approval from Group A. (User Y)

Any suggestion will be helpful.