How to create a security role with access to 'manage payments' but not to 'create payments'

Summary:

Custom AP security role needs access only to 'manage payments' function. But it works only if access to 'create payments' is given.

Content (please ensure you mask any confidential information):

We need a security role with very limited ability to view AP payment details. The role should not have any ability to create PPRs, PPR templates etc. It should be able to perform limited actions such as updating DFFs on the payment, voiding a payment apart from view only access for payments.

A security role XX_Accounts Payable Payment Supervisor was configured. It is able to view payments, PPR status, view payment DFFs, void a payment etc. This role was a clone of existing AP Payment supervisor role with many privileges removed.