Different profiles for offer creation and approval

We would need different levels of permission for access in the offers tab. For example, one access to create the offers but not be able to approve them, and another access that can both create and approve.

We want to prevent those who are supposed to only build the offers from activating it incorrectly without supervision/approval.

currently the same employee who builds the offer is able to approve it.