Can a user be set up to approve payments but not view the account information?
If they are to approve payments keyed by others then they must have unrestricted read access which means that they will be able to see balances and transactions on the account.