#update – sorry they will have access to the /wp-admin/ page but it will have no functionality.
The previous link I posted clarifies the role capabilities well. If that is your primary confusion.
Hi, this link shows the roles and levels of access each role has. I think the best way would be to put ‘subscriber’ as the default user level. this way they won’t have access to /wp-admin/ page. https://codex.wordpress.org/Roles_and_Capabilities