Limit User Access

How can I limit a user's ability to be able to process payroll liabilities, but NOT access Employees or Payroll (in particular, salaries, vacation time, etc)? We are using Premier.