How can prevent to see vm's status (overview and advance in monitor tab ) for a read only user

I am using vcsa 6.7 U3

I have add a read only  to a user just can get a console from a vm but with this permission , the user can see also monitor tab and also can get report in advance Is that possible prevent this access to see monitor ? and user just can get a console from specific vm ?  (Also I used other permissions such as console role even create a role with just console but another the user has access to monitor vm's status