Claiming and registering businesses different roles

I’m creating a site like Glassdoor, where employees can review businesses they’ve worked for. There are two roles: employee and employer. Businesses can be registered in one of two ways: either the business owner registers their business, or an employee can register a business if they want to review a business that isn’t already there.

If an employee has registered a business, I want the employee not to be able to edit that business profile (except by adding a review) and the business still be available to be claimed. If the employer has registered it, I want the employer to be able to edit it and have claimed it. Is this possible?

Thanks a lot for your help