Read Vendor Invoice but not enter payment

Is it possible to give a user permission to view vendor invoices without entering payments? I’m struggling to find the setting for this, though it works for customer invoices.