Request for everyone in the Web portal but not Renew or Unsubscribe

We want all active users to have access to request for everyone in the Web portal but NOT Renew or Unsubscribe. I am setting up a Role Based Permission Group in Designer. And with this Role Based Permission Group assigned, the users has access to Request for Everyone, BUT also to Renew and Unsuscribe.

How do we restrict this access to ONLY include Request ? 

Regards

Stig