Which user level for appointments+ customers?

Which user level should I use so that appointments+ users only have the backend? I don't want all my directory users to have backend access. How can I make that happen?
Also, can I make only appointments+ plugin available to them but non of the other plugins?