Thanks for the responses. Therefore, I will instead have to restrict access to the Web UI
either by creating an HBAC rule (this is my understanding of what to do), and instead
allowing them access a secondary self-service UI like
https://github.com/ubccr/mokey.
While this secondary software may not be the most stable, it will have to do (as long as
basic functions work) until FreeIPA implements their own solution.