This sound like a feature request to implement granular permission in the Dude. Dude is not under active development right now, an Mikrotik plans about it is not so clear.
Related to your case, not sure how complex is your network, but a separate Dude per customer with full access to it should work. But if you have ten’s, or even more, customers, that approach is not scalable.