Go to: Settings → Roles & Permissions
Every module has granular permission options:
View
Add
Edit
Delete
Export
Access settings
Access billing
Access reports
Enable or disable permissions based on your team structure.