You can create custom profiles with permissions as per your requirements. You can turn on/off permissions related to record access, record operations, record actions.