Authorization to Approve/Validate

Hi, I would like to put an extra layer of security for making payment or receive. The sales and account will be able to record sales and vendor invoices, but as for valudating the payment the manager should approve. How to achieve that?