Hi,
the rights and authorization that users have in Personas are the same that they have in SAP GUI or WEB GUI. THe only difference is the authorization to create flavors. This is maintained in an admin transaction of Personas.
What you can do is you can provide users with a URL/ Dashboard/ Fiori Launchpad, etc., so that they only have to open a Personas transaction in a browser and then they do not have to access the SAP GUI.
Best regards,
Christian