i notice that an agent can export the user data, which i need to block, please advise.
There is no way in the ui to prohibit this at this time. You would have to edit the files to remove the link, or do something else to limit the export command.