Some additional information provided by the customer:
Some subsequent testing has shown that if you are NOT a Domain Admin, you cannot see anything you don’t have access to. If you ARE a Domain Admin, then while we can restrict the functionality of what you do, you can still see everything.