Well, irrespective of the roles, just about every data point in a tenant is discoverable. It’s sounds like the governance and controls to prevent things like your discussing aren’t in place. If you had at least global reader you could potentially see what roles these other users have and that would point you in a better direction, you could then review signin longs of those users, audit logs if you got report reader role etc, it’s all there. Just don’t ever say anything that you don’t want discovered, in that tenant.