I reached out to our CSM, and he confirmed that we do not have access to Assets Essentials. I was able to deny permissions on the items we don't want asset-only surfers to be able to change. It's not perfect because they can still see these options, but at least they can't change anything.