This would be through creating security profile to suit the requirement and assign the profile to the position/s or to the person/s.
If you assign to a position as standard profile, it would be inherited to any person assigned to the position.
For details of security profile, discuss with your SAP Security consultant.