Can VF user permissions be configured so that they cannot view transcripts?

It seems that any user added (even if they have the Billing or Viewer role) can view transcripts. This isn't great from a data protection point of view, as only the people who need to access the data should be able to. So e.g. if I have a finance team member added to manage billing, they don't need to access user data and therefore shouldn't be able to.