In an ideal world we would have the ability to create a user profile with only the required permissions with access only to certain purchase flows and the customer orders related to the shows on that purchase flow. This could require a lot of detail and I have more detail if this is something that gets looked into.