I run an WISP and we provide hAP Lite routers to the customers. Now we manage the routers remotely, but do give the customer a limited user account to make some simple changes like SSID and wireless password along with creating their own port forwarding rules.
I do this by using the Skin Designer and removing, hiding, or disabling a majority of the items. However one issue I have is I cannot remove, hide, or disable the following items from the Quick Set CPE page
The customer can go to that page and if they change those settings it will break the customers wifi and will even sometimes screw up the config so bad the only fix is a factory reset.