diff --git a/packages/api-v4/src/iam/types.ts b/packages/api-v4/src/iam/types.ts
index 1b262dc3ca5..677cb9cafb5 100644
--- a/packages/api-v4/src/iam/types.ts
+++ b/packages/api-v4/src/iam/types.ts
@@ -358,3 +358,5 @@ export interface Roles {
 }
 
 export type IamAccessType = keyof IamAccountRoles;
+
+export type PickPermissions<T extends PermissionType> = T;
diff --git a/packages/manager/.changeset/pr-12714-changed-1755514005125.md b/packages/manager/.changeset/pr-12714-changed-1755514005125.md
new file mode 100644
index 00000000000..cd52ed18b37
--- /dev/null
+++ b/packages/manager/.changeset/pr-12714-changed-1755514005125.md
@@ -0,0 +1,5 @@
+---
+"@linode/manager": Changed
+---
+
+Update RBAC IAM Users Permissions ([#12714](https://github.com/linode/manager/pull/12714))
diff --git a/packages/manager/src/features/IAM/Roles/Roles.test.tsx b/packages/manager/src/features/IAM/Roles/Roles.test.tsx
index f5a08f19996..0fbfccaf172 100644
--- a/packages/manager/src/features/IAM/Roles/Roles.test.tsx
+++ b/packages/manager/src/features/IAM/Roles/Roles.test.tsx
@@ -8,10 +8,11 @@ import { RolesLanding } from './Roles';
 
 const queryMocks = vi.hoisted(() => ({
   useAccountRoles: vi.fn().mockReturnValue({}),
+  usePermissions: vi.fn().mockReturnValue({}),
 }));
 
 vi.mock('@linode/queries', async () => {
-  const actual = await vi.importActual<any>('@linode/queries');
+  const actual = await vi.importActual('@linode/queries');
   return {
     ...actual,
     useAccountRoles: queryMocks.useAccountRoles,
@@ -19,15 +20,21 @@ vi.mock('@linode/queries', async () => {
 });
 
 vi.mock('src/features/IAM/Shared/utilities', async () => {
-  const actual = await vi.importActual<any>(
-    'src/features/IAM/Shared/utilities'
-  );
+  const actual = await vi.importActual('src/features/IAM/Shared/utilities');
   return {
     ...actual,
     mapAccountPermissionsToRoles: vi.fn(),
   };
 });
 
+vi.mock('src/features/IAM/hooks/usePermissions', async () => {
+  const actual = await vi.importActual('src/features/IAM/hooks/usePermissions');
+  return {
+    ...actual,
+    usePermissions: queryMocks.usePermissions,
+  };
+});
+
 beforeEach(() => {
   vi.clearAllMocks();
 });
@@ -46,6 +53,11 @@ describe('RolesLanding', () => {
 
   it('renders roles table when permissions are loaded', async () => {
     const mockPermissions = accountRolesFactory.build();
+    queryMocks.usePermissions.mockReturnValue({
+      data: {
+        is_account_admin: true,
+      },
+    });
     queryMocks.useAccountRoles.mockReturnValue({
       data: mockPermissions,
       isLoading: false,
@@ -55,4 +67,17 @@ describe('RolesLanding', () => {
     // RolesTable has a textbox at the top
     expect(screen.getByRole('textbox')).toBeInTheDocument();
   });
+
+  it('should show an error message if user does not have permissions', () => {
+    queryMocks.usePermissions.mockReturnValue({
+      data: {
+        is_account_admin: false,
+      },
+    });
+
+    renderWithTheme(<RolesLanding />);
+    expect(
+      screen.getByText('You do not have permission to view roles.')
+    ).toBeInTheDocument();
+  });
 });
diff --git a/packages/manager/src/features/IAM/Roles/Roles.tsx b/packages/manager/src/features/IAM/Roles/Roles.tsx
index 9b3c0ef197f..9324c61113d 100644
--- a/packages/manager/src/features/IAM/Roles/Roles.tsx
+++ b/packages/manager/src/features/IAM/Roles/Roles.tsx
@@ -1,12 +1,17 @@
 import { useAccountRoles } from '@linode/queries';
-import { CircleProgress, Paper, Typography } from '@linode/ui';
+import { CircleProgress, Notice, Paper, Typography } from '@linode/ui';
 import React from 'react';
 
 import { RolesTable } from 'src/features/IAM/Roles/RolesTable/RolesTable';
 import { mapAccountPermissionsToRoles } from 'src/features/IAM/Shared/utilities';
 
+import { usePermissions } from '../hooks/usePermissions';
+
 export const RolesLanding = () => {
-  const { data: accountRoles, isLoading } = useAccountRoles();
+  const { data: permissions } = usePermissions('account', ['is_account_admin']);
+  const { data: accountRoles, isLoading } = useAccountRoles(
+    permissions?.is_account_admin
+  );
 
   const { roles } = React.useMemo(() => {
     if (!accountRoles) {
@@ -20,6 +25,12 @@ export const RolesLanding = () => {
     return <CircleProgress />;
   }
 
+  if (!permissions?.is_account_admin) {
+    return (
+      <Notice variant="error">You do not have permission to view roles.</Notice>
+    );
+  }
+
   return (
     <Paper sx={(theme) => ({ marginTop: theme.tokens.spacing.S16 })}>
       <Typography variant="h2">Roles</Typography>
diff --git a/packages/manager/src/features/IAM/Roles/RolesTable/RolesTable.test.tsx b/packages/manager/src/features/IAM/Roles/RolesTable/RolesTable.test.tsx
index e2ae276e7a7..5c469650dfb 100644
--- a/packages/manager/src/features/IAM/Roles/RolesTable/RolesTable.test.tsx
+++ b/packages/manager/src/features/IAM/Roles/RolesTable/RolesTable.test.tsx
@@ -7,6 +7,10 @@ import { RolesTable } from './RolesTable';
 
 import type { RoleView } from '../../Shared/types';
 
+const queryMocks = {
+  usePermissions: vi.fn(),
+};
+
 vi.mock('src/features/IAM/Shared/utilities', async () => {
   const actual = await vi.importActual<any>(
     'src/features/IAM/Shared/utilities'
@@ -17,6 +21,16 @@ vi.mock('src/features/IAM/Shared/utilities', async () => {
   };
 });
 
+vi.mock('src/features/IAM/hooks/usePermissions', async () => {
+  const actual = await vi.importActual<any>(
+    'src/features/IAM/hooks/usePermissions'
+  );
+  return {
+    ...actual,
+    usePermissions: vi.fn().mockReturnValue({}),
+  };
+});
+
 const mockRoles: RoleView[] = [
   {
     access: 'account_access',
@@ -40,6 +54,11 @@ const mockRoles: RoleView[] = [
 
 beforeEach(() => {
   vi.clearAllMocks();
+  queryMocks.usePermissions.mockReturnValue({
+    data: {
+      is_account_admin: true,
+    },
+  });
 });
 
 describe('RolesTable', () => {
diff --git a/packages/manager/src/features/IAM/Roles/RolesTable/RolesTable.tsx b/packages/manager/src/features/IAM/Roles/RolesTable/RolesTable.tsx
index 59903a32489..f06fdaaa32d 100644
--- a/packages/manager/src/features/IAM/Roles/RolesTable/RolesTable.tsx
+++ b/packages/manager/src/features/IAM/Roles/RolesTable/RolesTable.tsx
@@ -26,6 +26,7 @@ import {
 } from 'src/features/IAM/Shared/utilities';
 import { usePaginationV2 } from 'src/hooks/usePaginationV2';
 
+import { usePermissions } from '../../hooks/usePermissions';
 import {
   ROLES_LEARN_MORE_LINK,
   ROLES_TABLE_PREFERENCE_KEY,
@@ -43,6 +44,7 @@ interface Props {
   roles?: RoleView[];
 }
 const DEFAULT_PAGE_SIZE = 10;
+
 export const RolesTable = ({ roles = [] }: Props) => {
   // Filter string for the search bar
   const [filterString, setFilterString] = React.useState('');
@@ -54,6 +56,9 @@ export const RolesTable = ({ roles = [] }: Props) => {
   const [selectedRows, setSelectedRows] = useState<RoleView[]>([]);
   const [isDrawerOpen, setIsDrawerOpen] = useState<boolean>(false);
 
+  const { data: permissions } = usePermissions('account', ['is_account_admin']);
+  const isAccountAdmin = permissions?.is_account_admin;
+
   const pagination = usePaginationV2({
     currentRoute: '/iam/roles',
     initialPage: 1,
@@ -194,12 +199,14 @@ export const RolesTable = ({ roles = [] }: Props) => {
           </Grid>
           <Button
             buttonType="primary"
-            disabled={selectedRows.length === 0}
+            disabled={selectedRows.length === 0 || !isAccountAdmin}
             onClick={() => handleAssignSelectedRoles()}
             tooltipText={
               selectedRows.length === 0
                 ? 'You must select some roles to assign them.'
-                : undefined
+                : !isAccountAdmin
+                  ? 'You do not have permission to assign roles.'
+                  : undefined
             }
           >
             Assign Selected Roles
@@ -279,6 +286,7 @@ export const RolesTable = ({ roles = [] }: Props) => {
                     }}
                   >
                     <RolesTableActionMenu
+                      canUpdateUserGrants={isAccountAdmin}
                       onClick={() => {
                         assignRoleRow(roleRow);
                       }}
diff --git a/packages/manager/src/features/IAM/Roles/RolesTable/RolesTableActionMenu.test.tsx b/packages/manager/src/features/IAM/Roles/RolesTable/RolesTableActionMenu.test.tsx
index 13f3a088678..3a4ce965261 100644
--- a/packages/manager/src/features/IAM/Roles/RolesTable/RolesTableActionMenu.test.tsx
+++ b/packages/manager/src/features/IAM/Roles/RolesTable/RolesTableActionMenu.test.tsx
@@ -11,7 +11,9 @@ beforeEach(() => {
 
 describe('RolesTableActionMenu', () => {
   it('renders when used', () => {
-    renderWithTheme(<RolesTableActionMenu />);
+    renderWithTheme(
+      <RolesTableActionMenu canUpdateUserGrants={true} onClick={() => {}} />
+    );
 
     expect(screen.getByRole('button')).toBeInTheDocument();
   });
diff --git a/packages/manager/src/features/IAM/Roles/RolesTable/RolesTableActionMenu.tsx b/packages/manager/src/features/IAM/Roles/RolesTable/RolesTableActionMenu.tsx
index 640202e8ba6..1e2faabcd0e 100644
--- a/packages/manager/src/features/IAM/Roles/RolesTable/RolesTableActionMenu.tsx
+++ b/packages/manager/src/features/IAM/Roles/RolesTable/RolesTableActionMenu.tsx
@@ -3,16 +3,26 @@ import * as React from 'react';
 import { InlineMenuAction } from 'src/components/InlineMenuAction/InlineMenuAction';
 
 interface Props {
+  canUpdateUserGrants: boolean;
   onClick?: () => void;
 }
 
-export const RolesTableActionMenu = ({ onClick }: Props) => {
+export const RolesTableActionMenu = ({
+  canUpdateUserGrants,
+  onClick,
+}: Props) => {
   // This menu has evolved over time to where it isn't much of a menu at all, but rather a single action.
   return (
     <InlineMenuAction
       actionText={'Assign Role'}
       buttonHeight={40}
+      disabled={!canUpdateUserGrants}
       onClick={onClick}
+      tooltip={
+        !canUpdateUserGrants
+          ? 'You do not have permission to assign roles.'
+          : undefined
+      }
     />
   );
 };
diff --git a/packages/manager/src/features/IAM/Shared/AssignedRolesTable/AssignedRolesActionMenu.test.tsx b/packages/manager/src/features/IAM/Shared/AssignedRolesTable/AssignedRolesActionMenu.test.tsx
index a0ae9894662..82239999773 100644
--- a/packages/manager/src/features/IAM/Shared/AssignedRolesTable/AssignedRolesActionMenu.test.tsx
+++ b/packages/manager/src/features/IAM/Shared/AssignedRolesTable/AssignedRolesActionMenu.test.tsx
@@ -41,6 +41,7 @@ describe('AssignedRolesActionMenu', () => {
         handleUnassignRole={mockOnUnassignRole}
         handleUpdateEntities={mockOnUpdateEntities}
         handleViewEntities={mockOnViewEntities}
+        permissions={{ is_account_admin: true }}
         role={mockAccountRole}
       />
     );
@@ -62,6 +63,7 @@ describe('AssignedRolesActionMenu', () => {
         handleUnassignRole={mockOnUnassignRole}
         handleUpdateEntities={mockOnUpdateEntities}
         handleViewEntities={mockOnViewEntities}
+        permissions={{ is_account_admin: true }}
         role={mockEntityRole}
       />
     );
diff --git a/packages/manager/src/features/IAM/Shared/AssignedRolesTable/AssignedRolesActionMenu.tsx b/packages/manager/src/features/IAM/Shared/AssignedRolesTable/AssignedRolesActionMenu.tsx
index f3f8ef38226..ec96565a575 100644
--- a/packages/manager/src/features/IAM/Shared/AssignedRolesTable/AssignedRolesActionMenu.tsx
+++ b/packages/manager/src/features/IAM/Shared/AssignedRolesTable/AssignedRolesActionMenu.tsx
@@ -3,17 +3,21 @@ import React from 'react';
 import { ActionMenu } from 'src/components/ActionMenu/ActionMenu';
 
 import type { ExtendedRoleView } from '../types';
+import type { PickPermissions } from '@linode/api-v4';
 import type { Action } from 'src/components/ActionMenu/ActionMenu';
 
+type RolesActionsPermissions = PickPermissions<'is_account_admin'>;
 interface Props {
   handleChangeRole: (role: ExtendedRoleView) => void;
   handleUnassignRole: (role: ExtendedRoleView) => void;
   handleUpdateEntities: (role: ExtendedRoleView) => void;
   handleViewEntities: (role: string) => void;
+  permissions: Record<RolesActionsPermissions, boolean>;
   role: ExtendedRoleView;
 }
 
 export const AssignedRolesActionMenu = ({
+  permissions,
   handleChangeRole,
   handleUnassignRole,
   handleUpdateEntities,
@@ -22,16 +26,24 @@ export const AssignedRolesActionMenu = ({
 }: Props) => {
   const accountMenu: Action[] = [
     {
+      disabled: !permissions.is_account_admin,
       onClick: () => {
         handleChangeRole(role);
       },
       title: 'Change Role',
+      tooltip: !permissions.is_account_admin
+        ? 'You do not have permission to change this role.'
+        : undefined,
     },
     {
+      disabled: !permissions.is_account_admin,
       onClick: () => {
         handleUnassignRole(role);
       },
       title: 'Unassign Role',
+      tooltip: !permissions.is_account_admin
+        ? 'You do not have permission to unassign this role.'
+        : undefined,
     },
   ];
 
@@ -41,18 +53,30 @@ export const AssignedRolesActionMenu = ({
       title: 'View Entities',
     },
     {
+      disabled: !permissions.is_account_admin,
+      tooltip: !permissions.is_account_admin
+        ? 'You do not have permission to update this role.'
+        : undefined,
       onClick: () => {
         handleUpdateEntities(role);
       },
       title: 'Update List of Entities',
     },
     {
+      disabled: !permissions.is_account_admin,
+      tooltip: !permissions.is_account_admin
+        ? 'You do not have permission to change this role.'
+        : undefined,
       onClick: () => {
         handleChangeRole(role);
       },
       title: 'Change Role',
     },
     {
+      disabled: !permissions.is_account_admin,
+      tooltip: !permissions.is_account_admin
+        ? 'You do not have permission to unassign this role.'
+        : undefined,
       onClick: () => {
         handleUnassignRole(role);
       },
diff --git a/packages/manager/src/features/IAM/Shared/AssignedRolesTable/AssignedRolesTable.tsx b/packages/manager/src/features/IAM/Shared/AssignedRolesTable/AssignedRolesTable.tsx
index 90ee06b3590..754618cb9bc 100644
--- a/packages/manager/src/features/IAM/Shared/AssignedRolesTable/AssignedRolesTable.tsx
+++ b/packages/manager/src/features/IAM/Shared/AssignedRolesTable/AssignedRolesTable.tsx
@@ -17,6 +17,7 @@ import { TableSortCell } from 'src/components/TableSortCell/TableSortCell';
 import { usePaginationV2 } from 'src/hooks/usePaginationV2';
 import { useAccountEntities } from 'src/queries/entities/entities';
 
+import { usePermissions } from '../../hooks/usePermissions';
 import { AssignedEntities } from '../../Users/UserRoles/AssignedEntities';
 import { AssignNewRoleDrawer } from '../../Users/UserRoles/AssignNewRoleDrawer';
 import {
@@ -73,6 +74,7 @@ export const AssignedRolesTable = () => {
   const [order, setOrder] = React.useState<'asc' | 'desc'>('asc');
   const [orderBy, setOrderBy] = React.useState<OrderByKeys>('name');
   const [isInitialLoad, setIsInitialLoad] = React.useState(true);
+  const { data: permissions } = usePermissions('account', ['is_account_admin']);
 
   const pagination = usePaginationV2({
     currentRoute: '/iam/users/$username/roles',
@@ -238,6 +240,7 @@ export const AssignedRolesTable = () => {
                 handleUnassignRole={handleUnassignRole}
                 handleUpdateEntities={handleUpdateEntities}
                 handleViewEntities={handleViewEntities}
+                permissions={permissions}
                 role={role}
               />
             </TableCell>
@@ -374,7 +377,13 @@ export const AssignedRolesTable = () => {
         <Grid sx={{ alignSelf: 'flex-start' }}>
           <Button
             buttonType="primary"
+            disabled={!permissions?.is_account_admin}
             onClick={() => setIsAssignNewRoleDrawerOpen(true)}
+            tooltipText={
+              !permissions?.is_account_admin
+                ? 'You do not have permission to assign roles.'
+                : undefined
+            }
           >
             Assign New Roles
           </Button>
diff --git a/packages/manager/src/features/IAM/Shared/NoAssignedRoles/NoAssignedRoles.tsx b/packages/manager/src/features/IAM/Shared/NoAssignedRoles/NoAssignedRoles.tsx
index f8a85c53368..f02ca9cfa18 100644
--- a/packages/manager/src/features/IAM/Shared/NoAssignedRoles/NoAssignedRoles.tsx
+++ b/packages/manager/src/features/IAM/Shared/NoAssignedRoles/NoAssignedRoles.tsx
@@ -3,6 +3,7 @@ import React from 'react';
 
 import EmptyState from 'src/assets/icons/empty-state-cloud.svg';
 
+import { usePermissions } from '../../hooks/usePermissions';
 import { AssignNewRoleDrawer } from '../../Users/UserRoles/AssignNewRoleDrawer';
 
 interface Props {
@@ -13,6 +14,7 @@ interface Props {
 export const NoAssignedRoles = (props: Props) => {
   const { text, hasAssignNewRoleDrawer } = props;
   const theme = useTheme();
+  const { data: permissions } = usePermissions('account', ['is_account_admin']);
 
   const [isAssignNewRoleDrawerOpen, setIsAssignNewRoleDrawerOpen] =
     React.useState<boolean>(false);
@@ -42,7 +44,13 @@ export const NoAssignedRoles = (props: Props) => {
       {hasAssignNewRoleDrawer && (
         <Button
           buttonType="primary"
+          disabled={!permissions?.is_account_admin}
           onClick={() => setIsAssignNewRoleDrawerOpen(true)}
+          tooltipText={
+            !permissions?.is_account_admin
+              ? 'You do not have permission to assign roles.'
+              : undefined
+          }
         >
           Assign New Roles
         </Button>
diff --git a/packages/manager/src/features/IAM/Users/UserDetails/DeleteUserPanel.test.tsx b/packages/manager/src/features/IAM/Users/UserDetails/DeleteUserPanel.test.tsx
index 5126852229f..cc1874b1778 100644
--- a/packages/manager/src/features/IAM/Users/UserDetails/DeleteUserPanel.test.tsx
+++ b/packages/manager/src/features/IAM/Users/UserDetails/DeleteUserPanel.test.tsx
@@ -26,7 +26,9 @@ describe('DeleteUserPanel', () => {
       username: 'current_user',
     });
 
-    const { getByTestId } = renderWithTheme(<DeleteUserPanel user={user} />);
+    const { getByTestId } = renderWithTheme(
+      <DeleteUserPanel canDeleteUser={true} user={user} />
+    );
 
     const deleteButton = getByTestId('button');
     expect(deleteButton).toBeDisabled();
@@ -42,7 +44,9 @@ describe('DeleteUserPanel', () => {
       username: 'current_user',
     });
 
-    const { getByTestId } = renderWithTheme(<DeleteUserPanel user={user} />);
+    const { getByTestId } = renderWithTheme(
+      <DeleteUserPanel canDeleteUser={true} user={user} />
+    );
 
     const deleteButton = getByTestId('button');
     expect(deleteButton).toBeDisabled();
@@ -58,7 +62,9 @@ describe('DeleteUserPanel', () => {
       username: 'user',
     });
 
-    const { getByTestId } = renderWithTheme(<DeleteUserPanel user={user} />);
+    const { getByTestId } = renderWithTheme(
+      <DeleteUserPanel canDeleteUser={true} user={user} />
+    );
 
     const deleteButton = getByTestId('button');
     expect(deleteButton).toBeEnabled();
@@ -75,7 +81,7 @@ describe('DeleteUserPanel', () => {
     });
 
     const { getByTestId, getByText } = renderWithTheme(
-      <DeleteUserPanel user={user} />
+      <DeleteUserPanel canDeleteUser={true} user={user} />
     );
 
     const deleteButton = getByTestId('button');
@@ -85,4 +91,17 @@ describe('DeleteUserPanel', () => {
       getByText('The user will be deleted permanently.')
     ).toBeInTheDocument();
   });
+
+  it('disables the delete button when the user does not have delete_user permission', async () => {
+    const user = accountUserFactory.build({
+      username: 'my-linode-username',
+    });
+
+    const { getByTestId } = renderWithTheme(
+      <DeleteUserPanel canDeleteUser={false} user={user} />
+    );
+
+    const deleteButton = getByTestId('button');
+    expect(deleteButton).toBeDisabled();
+  });
 });
diff --git a/packages/manager/src/features/IAM/Users/UserDetails/DeleteUserPanel.tsx b/packages/manager/src/features/IAM/Users/UserDetails/DeleteUserPanel.tsx
index 3f0adbee15d..cb5513ee45f 100644
--- a/packages/manager/src/features/IAM/Users/UserDetails/DeleteUserPanel.tsx
+++ b/packages/manager/src/features/IAM/Users/UserDetails/DeleteUserPanel.tsx
@@ -10,10 +10,11 @@ import { UserDeleteConfirmation } from './UserDeleteConfirmation';
 import type { User } from '@linode/api-v4';
 
 interface Props {
+  canDeleteUser: boolean;
   user: User;
 }
 
-export const DeleteUserPanel = ({ user }: Props) => {
+export const DeleteUserPanel = ({ canDeleteUser, user }: Props) => {
   const [isDeleteDialogOpen, setIsDeleteDialogOpen] = useState(false);
 
   const navigate = useNavigate();
@@ -35,9 +36,17 @@ export const DeleteUserPanel = ({ user }: Props) => {
         <Box>
           <Button
             buttonType="outlined"
-            disabled={profile?.username === user.username || isProxyUserProfile}
+            disabled={
+              profile?.username === user.username ||
+              isProxyUserProfile ||
+              !canDeleteUser
+            }
             onClick={() => setIsDeleteDialogOpen(true)}
-            tooltipText={tooltipText}
+            tooltipText={
+              !canDeleteUser
+                ? 'You do not have permission to delete this user.'
+                : tooltipText
+            }
           >
             Delete
           </Button>
diff --git a/packages/manager/src/features/IAM/Users/UserDetails/UserEmailPanel.test.tsx b/packages/manager/src/features/IAM/Users/UserDetails/UserEmailPanel.test.tsx
index 18250bc1c34..6b7ed5453f9 100644
--- a/packages/manager/src/features/IAM/Users/UserDetails/UserEmailPanel.test.tsx
+++ b/packages/manager/src/features/IAM/Users/UserDetails/UserEmailPanel.test.tsx
@@ -25,7 +25,9 @@ describe('UserEmailPanel', () => {
   it("initializes the form with the user's email", async () => {
     const user = accountUserFactory.build();
 
-    const { getByLabelText } = renderWithTheme(<UserEmailPanel user={user} />);
+    const { getByLabelText } = renderWithTheme(
+      <UserEmailPanel canUpdateUser={true} user={user} />
+    );
 
     const emailTextField = getByLabelText('Email');
 
@@ -43,7 +45,7 @@ describe('UserEmailPanel', () => {
     );
 
     const { findByLabelText, getByLabelText, getByText } = renderWithTheme(
-      <UserEmailPanel user={user} />
+      <UserEmailPanel canUpdateUser={false} user={user} />
     );
 
     const warning = await findByLabelText(
@@ -68,7 +70,7 @@ describe('UserEmailPanel', () => {
     });
 
     const { getByLabelText, getByText } = renderWithTheme(
-      <UserEmailPanel user={user} />
+      <UserEmailPanel canUpdateUser={false} user={user} />
     );
 
     const warning = getByLabelText('This field can’t be modified.');
@@ -92,7 +94,7 @@ describe('UserEmailPanel', () => {
       username: 'user-1',
     });
 
-    renderWithTheme(<UserEmailPanel user={user} />);
+    renderWithTheme(<UserEmailPanel canUpdateUser={true} user={user} />);
 
     const emailInput = screen.getByLabelText('Email');
 
@@ -105,4 +107,19 @@ describe('UserEmailPanel', () => {
     const errorText = screen.getByText(/invalid email address/i);
     expect(errorText).toBeInTheDocument();
   });
+
+  it('disables the save button when the user does not have update_user permission', async () => {
+    const user = accountUserFactory.build({
+      email: 'my-linode-email',
+    });
+
+    const { getByRole, findByDisplayValue } = renderWithTheme(
+      <UserEmailPanel canUpdateUser={false} user={user} />
+    );
+
+    await findByDisplayValue(user.email);
+
+    const saveButton = getByRole('button', { name: 'Save' });
+    expect(saveButton).toBeDisabled();
+  });
 });
diff --git a/packages/manager/src/features/IAM/Users/UserDetails/UserEmailPanel.tsx b/packages/manager/src/features/IAM/Users/UserDetails/UserEmailPanel.tsx
index 860bb8a5e7c..fe6c003ee84 100644
--- a/packages/manager/src/features/IAM/Users/UserDetails/UserEmailPanel.tsx
+++ b/packages/manager/src/features/IAM/Users/UserDetails/UserEmailPanel.tsx
@@ -9,10 +9,11 @@ import { RESTRICTED_FIELD_TOOLTIP } from 'src/features/Account/constants';
 import type { User } from '@linode/api-v4';
 
 interface Props {
+  canUpdateUser: boolean;
   user: User;
 }
 
-export const UserEmailPanel = ({ user }: Props) => {
+export const UserEmailPanel = ({ canUpdateUser, user }: Props) => {
   const { enqueueSnackbar } = useSnackbar();
   const { data: profile } = useProfile();
 
@@ -73,9 +74,14 @@ export const UserEmailPanel = ({ user }: Props) => {
         />
         <Button
           buttonType="primary"
-          disabled={!isDirty}
+          disabled={!isDirty || !canUpdateUser}
           loading={isSubmitting}
           sx={{ mt: 2 }}
+          tooltipText={
+            !canUpdateUser
+              ? 'You do not have permission to update this user.'
+              : undefined
+          }
           type="submit"
         >
           Save
diff --git a/packages/manager/src/features/IAM/Users/UserDetails/UserProfile.tsx b/packages/manager/src/features/IAM/Users/UserDetails/UserProfile.tsx
index 55d3a0c46e6..d2fb6572022 100644
--- a/packages/manager/src/features/IAM/Users/UserDetails/UserProfile.tsx
+++ b/packages/manager/src/features/IAM/Users/UserDetails/UserProfile.tsx
@@ -1,10 +1,17 @@
 import { useAccountUser, useUserRoles } from '@linode/queries';
-import { CircleProgress, ErrorState, NotFound, Stack } from '@linode/ui';
+import {
+  CircleProgress,
+  ErrorState,
+  NotFound,
+  Notice,
+  Stack,
+} from '@linode/ui';
 import { useParams } from '@tanstack/react-router';
 import React from 'react';
 
 import { DocumentTitleSegment } from 'src/components/DocumentTitle';
 
+import { usePermissions } from '../../hooks/usePermissions';
 import { DeleteUserPanel } from './DeleteUserPanel';
 import { UserDetailsPanel } from './UserDetailsPanel';
 import { UserEmailPanel } from './UserEmailPanel';
@@ -12,14 +19,37 @@ import { UsernamePanel } from './UsernamePanel';
 
 export const UserProfile = () => {
   const { username } = useParams({ from: '/iam/users/$username' });
+  const { data: permissions } = usePermissions('account', [
+    'is_account_admin',
+    'update_user',
+    'delete_user',
+  ]);
 
-  const { data: user, error, isLoading } = useAccountUser(username ?? '');
-  const { data: assignedRoles } = useUserRoles(username ?? '');
+  const {
+    data: user,
+    error,
+    isLoading,
+  } = useAccountUser(username ?? '', permissions?.is_account_admin);
+  const { data: assignedRoles } = useUserRoles(
+    username ?? '',
+    permissions?.is_account_admin
+  );
+
+  const canUpdateUser = permissions?.update_user;
+  const canDeleteUser = permissions?.delete_user;
 
   if (isLoading) {
     return <CircleProgress />;
   }
 
+  if (!permissions?.is_account_admin) {
+    return (
+      <Notice variant="error">
+        You do not have permission to view this user&apos;s details.
+      </Notice>
+    );
+  }
+
   if (error) {
     return <ErrorState errorText={error[0].reason} />;
   }
@@ -36,9 +66,9 @@ export const UserProfile = () => {
         sx={(theme) => ({ marginTop: theme.tokens.spacing.S16 })}
       >
         <UserDetailsPanel assignedRoles={assignedRoles} user={user} />
-        <UsernamePanel user={user} />
-        <UserEmailPanel user={user} />
-        <DeleteUserPanel user={user} />
+        <UsernamePanel canUpdateUser={canUpdateUser} user={user} />
+        <UserEmailPanel canUpdateUser={canUpdateUser} user={user} />
+        <DeleteUserPanel canDeleteUser={canDeleteUser} user={user} />
       </Stack>
     </>
   );
diff --git a/packages/manager/src/features/IAM/Users/UserDetails/UsernamePanel.test.tsx b/packages/manager/src/features/IAM/Users/UserDetails/UsernamePanel.test.tsx
index 22bde07e31a..08a74f1cd71 100644
--- a/packages/manager/src/features/IAM/Users/UserDetails/UsernamePanel.test.tsx
+++ b/packages/manager/src/features/IAM/Users/UserDetails/UsernamePanel.test.tsx
@@ -22,7 +22,9 @@ describe('UsernamePanel', () => {
   it("initializes the form with the user's username", async () => {
     const user = accountUserFactory.build();
 
-    const { getByLabelText } = renderWithTheme(<UsernamePanel user={user} />);
+    const { getByLabelText } = renderWithTheme(
+      <UsernamePanel canUpdateUser={true} user={user} />
+    );
 
     const usernameTextField = getByLabelText('Username');
 
@@ -32,7 +34,9 @@ describe('UsernamePanel', () => {
   it('disables the input if the user doesn not have update_user permission', async () => {
     const user = accountUserFactory.build();
 
-    const { getByLabelText } = renderWithTheme(<UsernamePanel user={user} />);
+    const { getByLabelText } = renderWithTheme(
+      <UsernamePanel canUpdateUser={false} user={user} />
+    );
 
     expect(getByLabelText('Username')).toBeDisabled();
 
@@ -56,7 +60,7 @@ describe('UsernamePanel', () => {
     });
 
     const { getByLabelText, getByText } = renderWithTheme(
-      <UsernamePanel user={user} />
+      <UsernamePanel canUpdateUser={true} user={user} />
     );
 
     const warning = getByLabelText('This field can’t be modified.');
@@ -84,7 +88,7 @@ describe('UsernamePanel', () => {
     });
 
     const { getByLabelText, getByRole, findByDisplayValue } = renderWithTheme(
-      <UsernamePanel user={user} />
+      <UsernamePanel canUpdateUser={true} user={user} />
     );
 
     await findByDisplayValue(user.username);
@@ -97,4 +101,26 @@ describe('UsernamePanel', () => {
 
     expect(saveButton).toBeEnabled();
   });
+
+  it('disables the save button when the user does not have update_user permission', async () => {
+    const user = accountUserFactory.build({
+      username: 'my-linode-username',
+    });
+
+    queryMocks.userPermissions.mockReturnValue({
+      data: {
+        update_user: false,
+      },
+    });
+
+    const { getByRole, findByDisplayValue } = renderWithTheme(
+      <UsernamePanel canUpdateUser={false} user={user} />
+    );
+
+    await findByDisplayValue(user.username);
+
+    const saveButton = getByRole('button', { name: 'Save' });
+
+    expect(saveButton).toBeDisabled();
+  });
 });
diff --git a/packages/manager/src/features/IAM/Users/UserDetails/UsernamePanel.tsx b/packages/manager/src/features/IAM/Users/UserDetails/UsernamePanel.tsx
index 901f3f241e4..cf330e8bc5b 100644
--- a/packages/manager/src/features/IAM/Users/UserDetails/UsernamePanel.tsx
+++ b/packages/manager/src/features/IAM/Users/UserDetails/UsernamePanel.tsx
@@ -12,10 +12,11 @@ import { usePermissions } from '../../hooks/usePermissions';
 import type { User } from '@linode/api-v4';
 
 interface Props {
+  canUpdateUser: boolean;
   user: User;
 }
 
-export const UsernamePanel = ({ user }: Props) => {
+export const UsernamePanel = ({ user, canUpdateUser }: Props) => {
   const navigate = useNavigate();
   const { enqueueSnackbar } = useSnackbar();
 
@@ -79,9 +80,14 @@ export const UsernamePanel = ({ user }: Props) => {
         />
         <Button
           buttonType="primary"
-          disabled={!isDirty}
+          disabled={!isDirty || !canUpdateUser}
           loading={isSubmitting}
           sx={{ mt: 2 }}
+          tooltipText={
+            !canUpdateUser
+              ? 'You do not have permission to update this user.'
+              : undefined
+          }
           type="submit"
         >
           Save
diff --git a/packages/manager/src/features/IAM/Users/UserEntities/AssignedEntitiesTable.tsx b/packages/manager/src/features/IAM/Users/UserEntities/AssignedEntitiesTable.tsx
index 3dda690a153..a1fd2a6ee39 100644
--- a/packages/manager/src/features/IAM/Users/UserEntities/AssignedEntitiesTable.tsx
+++ b/packages/manager/src/features/IAM/Users/UserEntities/AssignedEntitiesTable.tsx
@@ -20,6 +20,7 @@ import { TableSortCell } from 'src/components/TableSortCell';
 import { usePaginationV2 } from 'src/hooks/usePaginationV2';
 import { useAccountEntities } from 'src/queries/entities/entities';
 
+import { usePermissions } from '../../hooks/usePermissions';
 import { ENTITIES_TABLE_PREFERENCE_KEY } from '../../Shared/constants';
 import { RemoveAssignmentConfirmationDialog } from '../../Shared/RemoveAssignmentConfirmationDialog/RemoveAssignmentConfirmationDialog';
 import {
@@ -48,6 +49,7 @@ export const AssignedEntitiesTable = () => {
     from: '/iam/users/$username',
   });
   const theme = useTheme();
+  const { data: permissions } = usePermissions('account', ['is_account_admin']);
 
   const { selectedRole: selectedRoleSearchParam } = useSearch({
     strict: false,
@@ -184,16 +186,24 @@ export const AssignedEntitiesTable = () => {
             .map((el: EntitiesRole) => {
               const actions: Action[] = [
                 {
+                  disabled: !permissions?.is_account_admin,
                   onClick: () => {
                     handleChangeRole(el, 'change-role-for-entity');
                   },
                   title: 'Change Role ',
+                  tooltip: !permissions?.is_account_admin
+                    ? 'You do not have permission to change this role.'
+                    : undefined,
                 },
                 {
+                  disabled: !permissions?.is_account_admin,
                   onClick: () => {
                     handleRemoveAssignment(el);
                   },
                   title: 'Remove Assignment',
+                  tooltip: !permissions?.is_account_admin
+                    ? 'You do not have permission to remove this assignment.'
+                    : undefined,
                 },
               ];
 
diff --git a/packages/manager/src/features/IAM/Users/UserEntities/UserEntities.test.tsx b/packages/manager/src/features/IAM/Users/UserEntities/UserEntities.test.tsx
index 674cd8f1eee..22034c79276 100644
--- a/packages/manager/src/features/IAM/Users/UserEntities/UserEntities.test.tsx
+++ b/packages/manager/src/features/IAM/Users/UserEntities/UserEntities.test.tsx
@@ -28,6 +28,7 @@ const queryMocks = vi.hoisted(() => ({
   useSearch: vi.fn().mockReturnValue({}),
   useAccountRoles: vi.fn().mockReturnValue({}),
   useUserRoles: vi.fn().mockReturnValue({}),
+  usePermissions: vi.fn().mockReturnValue({}),
 }));
 
 vi.mock('@linode/queries', async () => {
@@ -56,6 +57,14 @@ vi.mock('@tanstack/react-router', async () => {
   };
 });
 
+vi.mock('src/features/IAM/hooks/usePermissions', async () => {
+  const actual = await vi.importActual('src/features/IAM/hooks/usePermissions');
+  return {
+    ...actual,
+    usePermissions: queryMocks.usePermissions,
+  };
+});
+
 describe('UserEntities', () => {
   beforeEach(() => {
     queryMocks.useParams.mockReturnValue({
@@ -64,6 +73,11 @@ describe('UserEntities', () => {
     queryMocks.useSearch.mockReturnValue({
       selectedRole: '',
     });
+    queryMocks.usePermissions.mockReturnValue({
+      data: {
+        is_account_admin: true,
+      },
+    });
   });
 
   it('should display no entities text if no entity roles are assigned to user', async () => {
@@ -139,4 +153,17 @@ describe('UserEntities', () => {
     renderWithTheme(<UserEntities />);
     expect(screen.getByText(ERROR_STATE_TEXT)).toBeVisible();
   });
+
+  it('should not render if user does not have permissions', () => {
+    queryMocks.usePermissions.mockReturnValue({
+      data: {
+        is_account_admin: false,
+      },
+    });
+
+    renderWithTheme(<UserEntities />);
+    expect(screen.queryByText('This list is empty')).toBeNull();
+    expect(screen.queryByText('Assign New Roles')).toBeNull();
+    expect(screen.queryByText(NO_ASSIGNED_ENTITIES_TEXT)).toBeNull();
+  });
 });
diff --git a/packages/manager/src/features/IAM/Users/UserEntities/UserEntities.tsx b/packages/manager/src/features/IAM/Users/UserEntities/UserEntities.tsx
index 6ff73df9aa2..b203ace51b3 100644
--- a/packages/manager/src/features/IAM/Users/UserEntities/UserEntities.tsx
+++ b/packages/manager/src/features/IAM/Users/UserEntities/UserEntities.tsx
@@ -2,6 +2,7 @@ import { useAccountUser, useUserRoles } from '@linode/queries';
 import {
   CircleProgress,
   ErrorState,
+  Notice,
   Paper,
   Typography,
   useTheme,
@@ -11,6 +12,7 @@ import React from 'react';
 
 import { DocumentTitleSegment } from 'src/components/DocumentTitle';
 
+import { usePermissions } from '../../hooks/usePermissions';
 import {
   ERROR_STATE_TEXT,
   NO_ASSIGNED_ENTITIES_TEXT,
@@ -20,15 +22,18 @@ import { AssignedEntitiesTable } from './AssignedEntitiesTable';
 
 export const UserEntities = () => {
   const theme = useTheme();
-
   const { username } = useParams({ from: '/iam/users/$username' });
+  const { data: permissions } = usePermissions('account', ['is_account_admin']);
   const {
     data: assignedRoles,
     isLoading,
     error: assignedRolesError,
-  } = useUserRoles(username ?? '');
+  } = useUserRoles(username ?? '', permissions?.is_account_admin);
 
-  const { error } = useAccountUser(username ?? '');
+  const { error } = useAccountUser(
+    username ?? '',
+    permissions?.is_account_admin
+  );
 
   const hasAssignedRoles = assignedRoles
     ? assignedRoles.entity_access.length > 0
@@ -38,6 +43,14 @@ export const UserEntities = () => {
     return <CircleProgress />;
   }
 
+  if (!permissions?.is_account_admin) {
+    return (
+      <Notice variant="error">
+        You do not have permission to view this user&apos;s entities.
+      </Notice>
+    );
+  }
+
   if (error || assignedRolesError) {
     return <ErrorState errorText={ERROR_STATE_TEXT} />;
   }
diff --git a/packages/manager/src/features/IAM/Users/UserRoles/UserRoles.test.tsx b/packages/manager/src/features/IAM/Users/UserRoles/UserRoles.test.tsx
index 24b4a4ce804..a14d7e6cf9d 100644
--- a/packages/manager/src/features/IAM/Users/UserRoles/UserRoles.test.tsx
+++ b/packages/manager/src/features/IAM/Users/UserRoles/UserRoles.test.tsx
@@ -27,6 +27,7 @@ const queryMocks = vi.hoisted(() => ({
   useSearch: vi.fn().mockReturnValue({}),
   useAccountRoles: vi.fn().mockReturnValue({}),
   useUserRoles: vi.fn().mockReturnValue({}),
+  usePermissions: vi.fn().mockReturnValue({}),
 }));
 
 vi.mock('@linode/queries', async () => {
@@ -55,6 +56,14 @@ vi.mock('@tanstack/react-router', async () => {
   };
 });
 
+vi.mock('src/features/IAM/hooks/usePermissions', async () => {
+  const actual = await vi.importActual('src/features/IAM/hooks/usePermissions');
+  return {
+    ...actual,
+    usePermissions: queryMocks.usePermissions,
+  };
+});
+
 describe('UserRoles', () => {
   beforeEach(() => {
     queryMocks.useParams.mockReturnValue({
@@ -63,6 +72,11 @@ describe('UserRoles', () => {
     queryMocks.useSearch.mockReturnValue({
       selectedRole: '',
     });
+    queryMocks.usePermissions.mockReturnValue({
+      data: {
+        is_account_admin: true,
+      },
+    });
   });
 
   it('should display no roles text if no roles are assigned to user', async () => {
diff --git a/packages/manager/src/features/IAM/Users/UserRoles/UserRoles.tsx b/packages/manager/src/features/IAM/Users/UserRoles/UserRoles.tsx
index eb9630843ab..e742ab474a5 100644
--- a/packages/manager/src/features/IAM/Users/UserRoles/UserRoles.tsx
+++ b/packages/manager/src/features/IAM/Users/UserRoles/UserRoles.tsx
@@ -2,6 +2,7 @@ import { useAccountUser, useUserRoles } from '@linode/queries';
 import {
   CircleProgress,
   ErrorState,
+  Notice,
   Paper,
   Typography,
   useTheme,
@@ -11,6 +12,7 @@ import React from 'react';
 
 import { DocumentTitleSegment } from 'src/components/DocumentTitle';
 
+import { usePermissions } from '../../hooks/usePermissions';
 import { AssignedRolesTable } from '../../Shared/AssignedRolesTable/AssignedRolesTable';
 import {
   ERROR_STATE_TEXT,
@@ -20,15 +22,19 @@ import { NoAssignedRoles } from '../../Shared/NoAssignedRoles/NoAssignedRoles';
 
 export const UserRoles = () => {
   const { username } = useParams({ from: '/iam/users/$username' });
+  const { data: permissions } = usePermissions('account', ['is_account_admin']);
   const theme = useTheme();
 
   const {
     data: assignedRoles,
     isLoading,
     error: assignedRolesError,
-  } = useUserRoles(username ?? '');
+  } = useUserRoles(username ?? '', permissions?.is_account_admin);
 
-  const { error } = useAccountUser(username ?? '');
+  const { error } = useAccountUser(
+    username ?? '',
+    permissions?.is_account_admin
+  );
 
   const hasAssignedRoles = assignedRoles
     ? assignedRoles.account_access.length > 0 ||
@@ -39,6 +45,14 @@ export const UserRoles = () => {
     return <CircleProgress />;
   }
 
+  if (!permissions?.is_account_admin) {
+    return (
+      <Notice variant="error">
+        You do not have permission to view this user&apos;s roles.
+      </Notice>
+    );
+  }
+
   if (error || assignedRolesError) {
     return <ErrorState errorText={ERROR_STATE_TEXT} />;
   }
diff --git a/packages/manager/src/features/IAM/Users/UsersTable/ProxyUserTable.tsx b/packages/manager/src/features/IAM/Users/UsersTable/ProxyUserTable.tsx
index d4b7b41c2c1..6895a04a313 100644
--- a/packages/manager/src/features/IAM/Users/UsersTable/ProxyUserTable.tsx
+++ b/packages/manager/src/features/IAM/Users/UsersTable/ProxyUserTable.tsx
@@ -12,16 +12,16 @@ import { UsersLandingTableBody } from './UsersLandingTableBody';
 import type { Order } from './UsersLandingTableHead';
 
 interface Props {
+  canListUsers: boolean | undefined;
   handleDelete: (username: string) => void;
   isProxyUser: boolean;
-  isRestrictedUser: boolean | undefined;
   order: Order;
 }
 
 export const ProxyUserTable = ({
   handleDelete,
   isProxyUser,
-  isRestrictedUser,
+  canListUsers,
   order,
 }: Props) => {
   const {
@@ -29,7 +29,7 @@ export const ProxyUserTable = ({
     error: proxyUserError,
     isLoading: isLoadingProxyUser,
   } = useAccountUsers({
-    enabled: isProxyUser && !isRestrictedUser,
+    enabled: isProxyUser && canListUsers,
     filters: { user_type: 'proxy' },
   });
 
diff --git a/packages/manager/src/features/IAM/Users/UsersTable/UserRow.tsx b/packages/manager/src/features/IAM/Users/UsersTable/UserRow.tsx
index 4ca164aa96d..4587f4af107 100644
--- a/packages/manager/src/features/IAM/Users/UsersTable/UserRow.tsx
+++ b/packages/manager/src/features/IAM/Users/UsersTable/UserRow.tsx
@@ -12,6 +12,7 @@ import { StatusIcon } from 'src/components/StatusIcon/StatusIcon';
 import { TableCell } from 'src/components/TableCell';
 import { TableRow } from 'src/components/TableRow';
 
+import { usePermissions } from '../../hooks/usePermissions';
 import { UsersActionMenu } from './UsersActionMenu';
 
 import type { User } from '@linode/api-v4';
@@ -25,6 +26,12 @@ export const UserRow = ({ onDelete, user }: Props) => {
   const theme = useTheme();
 
   const { data: profile } = useProfile();
+  const { data: permissions } = usePermissions('account', [
+    'delete_user',
+    'is_account_admin',
+  ]);
+
+  const canViewUser = permissions.is_account_admin;
 
   const isProxyUser = Boolean(user.user_type === 'proxy');
 
@@ -42,9 +49,13 @@ export const UserRow = ({ onDelete, user }: Props) => {
           />
           <MaskableText isToggleable text={user.username}>
             <Typography sx={{ overflow: 'hidden', textOverflow: 'ellipsis' }}>
-              <Link to={`/iam/users/${user.username}/details`}>
-                {user.username}
-              </Link>
+              {canViewUser ? (
+                <Link to={`/iam/users/${user.username}/details`}>
+                  {user.username}
+                </Link>
+              ) : (
+                user.username
+              )}
             </Typography>
           </MaskableText>
           <Box display="flex" flexGrow={1} />
@@ -68,6 +79,7 @@ export const UserRow = ({ onDelete, user }: Props) => {
         <UsersActionMenu
           isProxyUser={isProxyUser}
           onDelete={onDelete}
+          permissions={permissions}
           username={user.username}
         />
       </TableCell>
diff --git a/packages/manager/src/features/IAM/Users/UsersTable/Users.tsx b/packages/manager/src/features/IAM/Users/UsersTable/Users.tsx
index e7ba6f24e77..a32f4e194d8 100644
--- a/packages/manager/src/features/IAM/Users/UsersTable/Users.tsx
+++ b/packages/manager/src/features/IAM/Users/UsersTable/Users.tsx
@@ -13,6 +13,7 @@ import { TableBody } from 'src/components/TableBody';
 import { useOrderV2 } from 'src/hooks/useOrderV2';
 import { usePaginationV2 } from 'src/hooks/usePaginationV2';
 
+import { usePermissions } from '../../hooks/usePermissions';
 import { UserDeleteConfirmation } from '../../Shared/UserDeleteConfirmation';
 import { CreateUserDrawer } from './CreateUserDrawer';
 import { ProxyUserTable } from './ProxyUserTable';
@@ -32,6 +33,7 @@ export const UsersLanding = () => {
   const [selectedUsername, setSelectedUsername] = React.useState('');
   const { data: profile } = useProfile();
   const theme = useTheme();
+  const { data: permissions } = usePermissions('account', ['create_user']);
   const pagination = usePaginationV2({
     currentRoute: '/iam/users',
     initialPage: 1,
@@ -77,8 +79,6 @@ export const UsersLanding = () => {
     },
   });
 
-  const isRestrictedUser = profile?.restricted;
-
   const isSmDown = useMediaQuery(theme.breakpoints.down('sm'));
   const isLgDown = useMediaQuery(theme.breakpoints.up('lg'));
 
@@ -104,13 +104,15 @@ export const UsersLanding = () => {
     setSelectedUsername(username);
   };
 
+  const canCreateUser = permissions.create_user;
+
   return (
     <React.Fragment>
       {isProxyUser && (
         <ProxyUserTable
+          canListUsers={true}
           handleDelete={handleDelete}
           isProxyUser={isProxyUser}
-          isRestrictedUser={isRestrictedUser}
           order={order}
         />
       )}
@@ -152,10 +154,10 @@ export const UsersLanding = () => {
           )}
           <Button
             buttonType="primary"
-            disabled={isRestrictedUser}
+            disabled={!canCreateUser}
             onClick={() => setIsCreateDrawerOpen(true)}
             tooltipText={
-              isRestrictedUser
+              canCreateUser
                 ? 'You cannot create other users as a restricted user.'
                 : undefined
             }
diff --git a/packages/manager/src/features/IAM/Users/UsersTable/UsersActionMenu.test.tsx b/packages/manager/src/features/IAM/Users/UsersTable/UsersActionMenu.test.tsx
index 96a2a3ecdfd..abcd93eb3d9 100644
--- a/packages/manager/src/features/IAM/Users/UsersTable/UsersActionMenu.test.tsx
+++ b/packages/manager/src/features/IAM/Users/UsersTable/UsersActionMenu.test.tsx
@@ -42,6 +42,10 @@ describe('UsersActionMenu', () => {
       <UsersActionMenu
         isProxyUser={true}
         onDelete={mockOnDelete}
+        permissions={{
+          is_account_admin: true,
+          delete_user: true,
+        }}
         username="test_user"
       />
     );
@@ -78,6 +82,10 @@ describe('UsersActionMenu', () => {
       <UsersActionMenu
         isProxyUser={false}
         onDelete={mockOnDelete}
+        permissions={{
+          is_account_admin: true,
+          delete_user: true,
+        }}
         username="test_user"
       />
     );
@@ -130,6 +138,10 @@ describe('UsersActionMenu', () => {
       <UsersActionMenu
         isProxyUser={false}
         onDelete={mockOnDelete}
+        permissions={{
+          is_account_admin: true,
+          delete_user: true,
+        }}
         username="current_user"
       />
     );
diff --git a/packages/manager/src/features/IAM/Users/UsersTable/UsersActionMenu.tsx b/packages/manager/src/features/IAM/Users/UsersTable/UsersActionMenu.tsx
index f08c4da1ec0..71083f0a7c6 100644
--- a/packages/manager/src/features/IAM/Users/UsersTable/UsersActionMenu.tsx
+++ b/packages/manager/src/features/IAM/Users/UsersTable/UsersActionMenu.tsx
@@ -4,19 +4,30 @@ import * as React from 'react';
 
 import { ActionMenu } from 'src/components/ActionMenu/ActionMenu';
 
+import type { PickPermissions } from '@linode/api-v4';
 import type { Action } from 'src/components/ActionMenu/ActionMenu';
 
+type UserActionMenuPermissions = PickPermissions<
+  'delete_user' | 'is_account_admin'
+>;
+
 interface Props {
   isProxyUser: boolean;
   onDelete: (username: string) => void;
+  permissions: Record<UserActionMenuPermissions, boolean>;
+
   username: string;
 }
 
-export const UsersActionMenu = ({ isProxyUser, onDelete, username }: Props) => {
+export const UsersActionMenu = (props: Props) => {
+  const { isProxyUser, onDelete, permissions, username } = props;
+
   const navigate = useNavigate();
 
   const { data: profile } = useProfile();
   const profileUsername = profile?.username;
+  const isAccountAdmin = permissions.is_account_admin;
+  const canDeleteUser = permissions.delete_user;
 
   const proxyUserActions: Action[] = [
     {
@@ -26,6 +37,10 @@ export const UsersActionMenu = ({ isProxyUser, onDelete, username }: Props) => {
           params: { username },
         });
       },
+      disabled: !isAccountAdmin,
+      tooltip: !isAccountAdmin
+        ? 'You do not have permission to manage access.'
+        : undefined,
       title: 'Manage Access',
     },
   ];
@@ -38,6 +53,10 @@ export const UsersActionMenu = ({ isProxyUser, onDelete, username }: Props) => {
           params: { username },
         });
       },
+      disabled: !isAccountAdmin,
+      tooltip: !isAccountAdmin
+        ? 'You do not have permission to view user details.'
+        : undefined,
       title: 'View User Details',
     },
     {
@@ -47,6 +66,10 @@ export const UsersActionMenu = ({ isProxyUser, onDelete, username }: Props) => {
           params: { username },
         });
       },
+      disabled: !isAccountAdmin,
+      tooltip: !isAccountAdmin
+        ? 'You do not have permission to view assigned roles.'
+        : undefined,
       title: 'View Assigned Roles',
     },
     {
@@ -56,10 +79,14 @@ export const UsersActionMenu = ({ isProxyUser, onDelete, username }: Props) => {
           params: { username },
         });
       },
+      disabled: !isAccountAdmin,
+      tooltip: !isAccountAdmin
+        ? 'You do not have permission to view entity access.'
+        : undefined,
       title: 'View Entity Access',
     },
     {
-      disabled: username === profileUsername,
+      disabled: username === profileUsername || !canDeleteUser,
       onClick: () => {
         onDelete(username);
       },
@@ -67,7 +94,9 @@ export const UsersActionMenu = ({ isProxyUser, onDelete, username }: Props) => {
       tooltip:
         username === profileUsername
           ? "You can't delete the currently active user."
-          : undefined,
+          : !canDeleteUser
+            ? 'You do not have permission to delete this user.'
+            : undefined,
     },
   ];
 
diff --git a/packages/manager/src/features/IAM/Users/UsersTable/UsersLandingTableBody.tsx b/packages/manager/src/features/IAM/Users/UsersTable/UsersLandingTableBody.tsx
index 845fba59a0f..379e9ab6fe1 100644
--- a/packages/manager/src/features/IAM/Users/UsersTable/UsersLandingTableBody.tsx
+++ b/packages/manager/src/features/IAM/Users/UsersTable/UsersLandingTableBody.tsx
@@ -1,3 +1,5 @@
+import { useProfile } from '@linode/queries';
+import { WarningIcon } from '@linode/ui';
 import React from 'react';
 
 import { TableRowEmpty } from 'src/components/TableRowEmpty/TableRowEmpty';
@@ -18,6 +20,7 @@ interface Props {
 
 export const UsersLandingTableBody = (props: Props) => {
   const { error, isLoading, numCols, onDelete, users } = props;
+  const { data: profile } = useProfile();
 
   if (isLoading) {
     return <TableRowLoading columns={numCols} rows={1} />;
@@ -28,7 +31,24 @@ export const UsersLandingTableBody = (props: Props) => {
   }
 
   if (!users || users.length === 0) {
-    return <TableRowEmpty colSpan={numCols} />;
+    return (
+      <TableRowEmpty
+        colSpan={numCols}
+        message={
+          profile?.restricted ? (
+            <>
+              <WarningIcon
+                style={{ position: 'relative', top: 2, marginRight: 4 }}
+                width={16}
+              />{' '}
+              You do not have permission to list users.
+            </>
+          ) : (
+            'No users found'
+          )
+        }
+      />
+    );
   }
 
   return (
diff --git a/packages/queries/.changeset/pr-12714-added-1755514068310.md b/packages/queries/.changeset/pr-12714-added-1755514068310.md
new file mode 100644
index 00000000000..36ba030de84
--- /dev/null
+++ b/packages/queries/.changeset/pr-12714-added-1755514068310.md
@@ -0,0 +1,5 @@
+---
+"@linode/queries": Added
+---
+
+Enable parameters to useAccountUsers & useUserRoles ([#12714](https://github.com/linode/manager/pull/12714))
diff --git a/packages/queries/src/account/users.ts b/packages/queries/src/account/users.ts
index aae7a1150ed..f7aed11e148 100644
--- a/packages/queries/src/account/users.ts
+++ b/packages/queries/src/account/users.ts
@@ -58,11 +58,11 @@ export const useAccountUsersInfiniteQuery = (
   });
 };
 
-export const useAccountUser = (username: string) => {
+export const useAccountUser = (username: string, enabled: boolean = true) => {
   return useQuery<User, APIError[]>({
     ...accountQueries.users._ctx.user(username),
     // Enable the query if the user is not on the blocklist
-    enabled: !getIsBlocklistedUser(username),
+    enabled: !getIsBlocklistedUser(username) && enabled,
   });
 };
 
diff --git a/packages/queries/src/iam/iam.ts b/packages/queries/src/iam/iam.ts
index 64c3a4e1f1e..ce38dd6a3ee 100644
--- a/packages/queries/src/iam/iam.ts
+++ b/packages/queries/src/iam/iam.ts
@@ -13,11 +13,11 @@ import type {
   PermissionType,
 } from '@linode/api-v4';
 
-export const useUserRoles = (username?: string) => {
+export const useUserRoles = (username?: string, enabled: boolean = true) => {
   return useQuery<IamUserRoles, APIError[]>({
     ...iamQueries.user(username ?? '')._ctx.roles,
     refetchOnMount: 'always',
-    enabled: Boolean(username),
+    enabled: Boolean(username) && enabled,
   });
 };