I ended up following this topic and manage to achieve the permissions I wanted to give in order to an external person can manage the affiliate program without accessing other confidential information:
https://www.role-editor.com/block-admin-menu-items
