Security to Keep Sales Reps from Closing Deals

Is there something stopping you from using user groups and permissions to stop sales reps from doing this? I haven’t had to separate users more than Super Admin and User so I could be missing something.