There are some database user rights that can be controlled within the CRM itself, dependent upon whether or not a database user is set up as an admin user of the database.
There are a handful of other database rights, however, that are available to all database users by default, but can be revoked by the database owner should the need arise. In order to revoke any or all of the below rights for an individual or multiple database users, the database owner would need to right-click those users under Manage Your Account —> Manage Database Users & Teams in the Current Database Users section and select "Manage User Restrictions". The rights that can be revoked are:
- the rights to delete notes
- the rights to delete records
- the rights to run exports
- the rights to change servicing advisors
- the rights to change writing advisors
- the rights to access reports
- the rights to combine records
Note: changes made to user restrictions will not take effect until the affected user's next login, so if you as the database owner want them to be in place immediately you will need to instruct those database users to log out and log back in after you have set up the restrictions.