Security permission controlling payment creation in accounts payable

Hi

Does anyone know which permission controls the creation of payments in the accounts payable module?

We have a requirement for strict control over this function, and would like to create a custom role that manages just this.

Thanks

Jason