Restrict Technican's PO access to approving only

I would like to remove a technician's access for creating and editing PO's in the service desk, but allow them to approve request's is this possible??