I just installed the plugin, made some test users and contacts and found a problem.
When a CRM Agent or CRM Manager goes into the detail view of a contact, he is allowed to make a WP user of this contact. The biggest problem is, that he can choose from all WP roles and make him an administrator.
Three buttons are shown on the top of the detail view:
1) Back to contact list
2) Edit this contact
3) Make WP User