Restricting who can add Product to Account

Restricting who can add Product to Account

Hi guys - Can you advise whether I can restrict which users are allowed to add Products to Accounts? I can't find it in the Profile settings. I can restrict permissions on the individual modules but not on the connections between them?

We are a member association so knowing who subscribes to what is really important for us. We need the information to be trusted so would prefer to restrict who is able to add a subscription (Product) to an account.

Thanks,

Linda