A viewer role can access edit agent tab and even show update agent button. That should not be the case. I think should re-access permission level for agents. Perhaps remove edit agent tab for viewers.