Users without "User Access" view or manage permissions SHOULD NOT be able to list other users via Dash sharing or Reports Scheduling

I need to spend more time in a non-admin role ?. 

It looks like all users, despite what is defined in "User Access" for their roles, are able to list other users via Dash Sharing and Reports Schedule. We feel that should not be the case. I would only want my coworkers to be able to do this, NOT my clients who should not be aware of each other (at least not through our monitoring application).