As most dual function environments (Retail and Client Support) we have a reception desk that is manned to book clients systems for our internal workshop.

An additional logon that has only access to create customers , contacts and log tickets would be a logical step.

No further function beyond this would be required.