Restrictions for Staff users

How can I make it where my sales people can login to the books, but only add new invoices for sales they made?
Not seeing the expenses, bank accounts and all of those admin sections?

Can I add a role and set what that user in that role is allowed to access?

Thanks,
Richard