Yes they can, you can adjust the customer center role's permissions and give them create access on sales orders, I believe is how I did it in my past life, then I created a massively simplified custom form to default to that role