This is treading very close to being off-topic as it asks specifically about a particular plugin, but the answer is quite generic:
You can remove the capabilities you don’t need.
function remove_cap_wpse_186316(){
remove_cap( 'yourwoorole', 'yourwoocap' );
remove_cap( 'yourwoorole', 'yourwoocap1' );
}
add_action( 'admin_init', 'remove_cap_wpse_186316' );
The above is code is for demonstration/experimentation only. Note the note in the codex about this needing to only run once:
Note: This setting is saved to the database (in table wp_options,
field ‘wp_user_roles’), so you should run this only once, on
theme/plugin activation and/or deactivation.
You can use get_role()
and dump the output to see what capabilities you are dealing with:
var_dump(get_role( 'yourwoorole' ));