Hello,
Currently QuickBooks Online doesn't offer that kind of setting for user access. If a user is set to have access to AP, then they have access to pretty much ALL of the AP side of the business. Same with the AR side of the business.
I understand your desire for the ability for payments to be approved before entered, This is a great feature request. I recommend you send that request directly to the engineers by clicking the Gear icon and selecting Feedback.
