Hi Mike_James,
That does sound unexpected. If the 'Cards" access is removed and supplier cards are set to read-only, the user shouldn't be able to edit payment details.
It might be worth checking if they have another role assigned that's giving them extra permissions. Sometimes, even if one role restricts access, another one might override it. If a custom role was set up, it's also possible that the restrictions aren't applying as expected.
If that didn't work, it might be best to reach out to our live chat support through our virtual assistant MOCA or submit a case via MyAccount so they can double check the access.
Regards,
Sai
