How to restrict user to modify Acocunt details but can access Application tab

Issue

• How to restrict user to modify Acocunt details but can access Application tab ?
• It should be possible to remove the manage-account permission from the users so the users won't be able to change their username, first name, last name, email etc but at the same time these users should have permission to Applications tab.