The partner service using role partner needs to read only the customer identity from users: id and name. Email and all other fields must stay hidden. Configure access to users for exactly those two columns.