A user with the viewer role can see plan info. We didn't try submit changes but the links to change the invoice email and payment info are shown and will display and edit form when clicked. This seems to be something that only an Admin role should be able to access.