If you need to lock down user permissions, you can create custom roles to control what actions your users are able to perform in your knowledge base.
Users with full account admin access can create custom roles under Your Account > Users > Roles. A common use case is to create a role who has access to create and edit draft articles but not publish them. This is often called a Content Contributor.
Once you create a custom role, you can then assign users to the role to further restrict what actions they can perform in your knowledge base.