Want to give staff access to send invoices, but not to reports and full accounting info