Limit booking hours for all employees to X roles

The desire is that the function of 'booking hours for all employees' can be further specified in terms of user roles.

Example:

The Operator role can record all hours for operational staff, but cannot record hours for management/office staff. Only for the selected authorization role.