Users without "User Access" view or manage permissions SHOULD NOT be able to list other users via Dash sharing or Reports Scheduling

I need to spend more time in a non-admin role ?.  It looks like all users, despite what is defined in "User Access" for their roles, are able to list other users via Dash Sharing and Reports ...