Can I change what each role can do?

Yes. Settings → Permissions on the finance pages lists every finance permission (creating and approving expenses at each tier, seeing vendor bank details, making payment files, exporting to Tally, posting to the ledger and more) against each role. Tick or untick, then save.