PassagePoint uses user roles that a user can be assigned.

A user role can be fine tuned to allow/deny certain permissions

Home > configure systems > User Roles > select role > Edit > select or deselect the desired permissions