Group Permission Issue

A user with limited permissions - only have "Active" and "Branding Sign Off Required selected for the group - is able to see the "Renewals" tab. If this user goes to the "Dashboard" they can see the "Admin" tab. When trying to access "Admin > Settings" they are shown an error message saying they don't have permission to view it.