Scenario
When a user is granted Edit access for the Employee Record permission, that user will also have the ability to Give Access to new or existing employees. There is no specific permission to restrict a user from providing access. Alternatively, you can hide the Access subtab by creating a Custom Form for a specific role.
Solution
Create a Custom Form
1. Navigate to Customization > Forms > Entry Forms
2. Standard Employee Form: Click Customize
3. Enter Name
4. Click Subtabs
5. Access: Remove Checkmark
6. Click Roles
Role affected > Check Preferred
8. Click Save
Edit the Custom Role
1. Navigate to Setup > Users/Roles > Manage Roles
2. Custom Role: Click Edit
3. Click Forms
4. Click Entity
5. Custom form:
Mark or check the Preferred box
Mark or check the Restricted box
6. Click Save