I'm wondering about your use case here. An order form is for your customers, not your team members. In order for a team member to use an order form on behalf of a customer you'll need to have them collect the credit card information from the customer and enter it into the form. It is bad from a security standpoint to have team members handling customer credit card data and exposes you to liability in case of a breech.
A safer way to generate manual transactions on behalf of your customers is for the team member to use the customer's Contact Record and log a manual transaction. Your team member can only see the last four digits of the credit card so there is not a security issue.