Thanks for replying.
What I understood is that with this setup or not I give permission for a user accessing the web console entirely. That is, either user accesses all or does not access anything.
What I want is to give limited access to web console, allowing a user to access the web concole but do not have access to certain areas or reports within it, and mostly unable to perform the actions.
Is to do this?