Remove the items from the context menu if they are not used by end-user. For example, if the user does not want to use drill-history, he should have an option to hide the functionality without changing the rights on the object.
When configuring a SAML single-sign-on connection in Excel, the login information is cached. In order to logout of the SAML connection there is no other possibility than check the option "Delete cache when closing Excel" in "Options>Modeler opt...