Anthony thanks for your response. The only app that they should have access to is Mail, so they can browse and look at their own emails as well as download.
I managed to to remove the reports options. Last link you sent -> Reports
Task - > View and run reports on CommCell Console.
Permission-> Report Management
Associated Entities -> Any entity that you want to view in reports such as clients, storage policies, libraries, and any other available entity in the CommCell Console.
Still trying to figure out the SharePoint option. Want to completely remove that from the list.