Allow role to add a new record but not modify/delete existing records

How do I allow a role to add new records to a table, but restrict their ability to modify or delete existing records?  Case: I want to 'lock-in' the Customer name, so that once it's created no-one ...