Instead of a new access role, we will expand the functionality of the "Prevent Clock In/Out" option. Any user with the option checked will not show up in the list of employees when exporting timesheets or creating shifts.