Creating Customer and Sales Order segregation of duties

We are in the process of tackling segregation of duties between whom can create customers and/or sales orders.  From a customer care standpoint we would like to enable an advocate to do both functions but comply from an audit standpoint.  Can anyone share with me their experiences on how this was handled?  We are trying to avoid transferring customers from advoctate to advocate when they call in to place an order.