Question about user roles: allow posting AP invoice batches

I guess I'm a bit lost in terminology and semantics here...

The auditors are reviewing our system and the question came up about who is allowed to post AP invoice batches.

I have looked at the Tasks/Security Events/Module Options for AP and none of them seem to say "allow posting of AP invoice batches".

Please enlighten me :)