Make sure your users belong to the needed groups (on your test environment you could grant full access and start unchecking once it works, that way you will also get better understanding of the permissions structure)
o make sure you have a valid Customer selected before choosing the assigned Service ;-)