Jboss console management user

Can we create jboss management console user to view only logs also unable to access settings and deployment or un-deployment in JBOSS EAP 7.