Currently there are 2 ways/types of access in Employee Portal to the documents which can be provided:
...
'Grant Access' is ON: employee can add, modify, delete document record/scanned copy.
'Read-only' is ON: employee can only review the document information without possibility to add new data, modify existing, delete document record/scanned copy.
Note:
It is not possible to give a person access to add a new attachment, but not be able to delete a record.
...