Create a company admin role to allow an admin to view/pay invoices but prevents the admin from enrolling/unenrolling employees