Welcome, and thank you for taking the time to post today, Ross!
On the Manage Users page, you can change the Type of a user and choose access rights based on the type you choose.
For a standard user type, you can give them access to Payroll and or limit them to Customer and Vendor related activities. You'll see the list of things that they can and cannot do per access right.
Here are the articles for your reference:
Please don't hesitate to reach back out if need more help with managing your user's permissions. Have a good one!