This should not be the case if that is indeed the only role they have. To make sure please check if Windows groups these users are in aren't mentioned on different roles.
You can verify the permissions a user has by clicking on the configuration button at the top right, then click the Configured user info button. This should show either the role a user has (top left), or which Windows groups contribute to the permissions (to the right).
Keep in mind that users have to log out in order to get their new roles.