Go to System > Security > Access Rights
Then go to Systems > Sales Invoicing > Forms
If you wish to exclude a Security Role from invoicing all together, highlight the Invoice folder by single clicking and ‘tick’ the selected roles. The Invoicing entry on the menu will no longer appear for these users.
If you wish a role to be able to, for example, invoice Hire Contracts, but not anything else then simply highlight the other three ‘actions’ (one at a time) and ‘tick’ the role.
If you want to prevent the users from Batch Updating go to Systems > Other > Forms > Batch Update