ERP Sales Orders - authorization

Hello,

I've added the logical link for searching ERP Sales Orders in the CRM Webclient UI.

I want to limit the user to only view the ERP Sales Orders, thus not allowing creation of new orders or changing existing orders.

Which authorization object can be used to control this?

Kind regards,

Johan Wigert