Are you sure they are clicking on the right Cloudflare account on their dashboard? They should have
Are you sure they are clicking on the right Cloudflare account on their dashboard? They should have multiple listed

domain scoped roles is an enterprise only thingNope, they are available to everyone
cf.response.1xxx_code is equal to 1033Note: This field is only available in HTTP response header modifications and custom error responses.

cf.response.1xxx_code1033