Customer Service Logins?

We have hired our first customer service person that will need to log into the Admin Panel to support our vendors and buyers in Multi-Vendor. We created a user group for them and made most of permissions for them as "No Access". All they really need access to is to see the buyer and vendor profiles to help support the clients.

I then logged in as that user and they still have the ability to edit the website, change the addons, delete things, etc.

What am I doing wrong? As we grow our support team and eventually have dozens of people handling customer support what are other people doing to only grant the right permissions to your employees logging into CS-Cart? We need to protect our business from an employee making a mistake and completely screwing up the website.

Thoughts?