Currently there are 2 ways/types of access in Employee Portal to the documents which can be provided:
Read-only;
Write/Edit.
It is done in Administrator Portal > Access Control > Roles:
By selecting corresponding Role > go to My Documents > to set appropriate access to Travel, Certificates, Medical, and Enclosed Documents:
IF
'Grant Access' is ON: employee can add, modify, delete document record/scanned copy.
'Read-only' is ON: employee can only review the document information without possibility to add new data, modify existing, delete document record/scanned copy.
Note:
It not possible to give a person access to add a new attachment, but not be able to delete a record.
Or give a person access to only update/change the dates, but not delete a record.