when you create the profile, it will give you the option of using default, least restrictive or most restrictive. Pick the "least restrictive".
once it bring up the new wondow to configure the profile - it will have four tabs on top - General/Modules/Device Commands/Data Types.
Only modify the "modules tab"
Only give them access to the "badges" and "personnell" modules.
uncheck the boxes of every other module.
dont mess with anything else. just make sure you click on EVERY module and uncheck it eisdes the "badges" and personnel" modules.
its late and im tired so i am not sure if that made much sense. but i will elaborate if you need me to.