Restrict Technican's PO access to approving only

Restrict Technican's PO access to approving only

I would like to remove a technician's access for creating and editing  PO's in the service desk, but allow them to approve request's is this possible??

                  New to ADSelfService Plus?