Variety of ways to do it depending upon how complicated you want to get.
1) Invoke Access Security...Vary good....Total Control.... Minefield for the unwary..... Fair bit of admin if rights or people change
2) Have a password form that leads to the add, delete etc functions. Need to switch of F11 key, bypass key and standard toolbars and menus. Fine until someone cribs the password and then you must change and tell all valid users
3) If they are using it across a network Have an opening form with all the buttons Add, Delete etc with only the Enquiries button visible property set to Yes. Detect Logon ID with api type thingy and have a function that if their logon ID exists is a specific table then visible propertty of command buttons becomes True. Need to close out F11, bypass and standard menus and toolbars. Easy to administer and if you are cute about it you can give people add but not edit, Delete but not add and all those sort of tweaks.
2 and 3 are not repeat not really secure. They will keep out the curious and the amateur but do not consider your database secure.
Len B