Customers SubFunction to restrict users from creating customers/accounts

Hi,

There is a scenario where I would want to give full access to a group of users for creating and maintaining customers, accounts, addresses, contacts and all and a limited access to the rest for adding addresses, contact etc., We would like to use one responsibility and restrict based on the role assigned.

I was able to create a menu of type permission set and added the customers functions and subfunctions to give full access to create/maintain customers and assigned the role to a certain user which is working but how to restrict another user who is using the same responsibility but doesn't have this role assigned to be able to view customers and have the ability to add addresses, contacts etc.,?