HR/Financial Access to Entering Time Ahead on Timesheet

We want to lock users out of entering time ahead on their timecards.

However, this means they cannot enter time ahead for PTOs.

And when we lock-out the time-head availability, it locks it out for everyone, even admins.

We need the ability to have a sort of "HR admin" functionality so that person can have enter-ahead access.