Thanks, I adjusted out Manage security role and it seems to be working. Its probably still more than it needs but better than Admin.
For anyone else, in Connectwise Managed terms I set the following:
Companies
Company Maintenance Inquire Level ALL
Company/contact Group Maintenance Inquire...