Update the existing Access rights (Remove create and edit permissions) for master models (here res.partner, product.template).

create a new group called " Master Creation" (as you like), for this group provide the create and edit access rights master models and added list of users to do it.

For approval system, we need to do some customization (while create partner active=False, while doing approval active=True)