GP 2010 Payroll Only Roles

I have a client who after an audit now wants to remove all access to payroll functions for non-payroll people. Which roles are the payroll only roles? I may need to create new roles for just the payroll tasks and assign those roles to people.