User need register to read full blog but how i can disallow user to post blog ?

I configurate visitors need to register to read full blog post this is ok

registerd user can make comment = ok

but i dont want some one exept superadmin can post a new blog post, so how i can restrict registerd user from posting new blog and let him only comment on existing blogs.