Hi there,
I tried out different roles to see which could view the attendees and orders tabs, and it seems that you need to be either an editor or administrator. I looked at all of the permissions, and there doesn’t seem to be a special one just for that, so it must be using “edit_others_tribe_events” which unfortunately also allows them to create, edit, and delete others events.
You can read more about the roles and permissions for our plugins here: https://theeventscalendar.com/knowledgebase/admin-roles-and-permissions/
Hope that helps. Please let me know if you have any additional questions about this.
Thanks,
Sky