Security Roles in Dynamics CRM 2011

Hey Guys,

Just a quick one;

How do I set up the security roles for users who should only be able to deactivate and not delete Accounts. The users should also not be able to modify any other CRM records.

Thanks!