Open the Action Access Permissions tab on the Role screen.
If you need to remove a specific user ability to perform certain functions, you can revoke their access to any of the toolbar buttons.
E.g. If a user should not be able to post an invoice into Sage Evolution, then select the Post Invoice action and set the Execute checkbox to false.
