I created a specific role for someone I only want to be able to add/edit an estimate. Problems with this limited 'Sales' role are:

1) I am not able to uncheck the delete option for Estimates.
2) The user role still has access to see open invoice totals by customer.
3) I don't want this person to be able to make any changes to products and services, but this is also granted with this role.