Allowing View Only right to CMC in BO 4

We are trying to create a VIEW only access to our BO consultant in our production CMC.  But there are certain things that are hard to control.  For example, Authentication - Is there a way to make it VIEW only.  How about other options listed below - is there a way to make it so he can view it but not change it;

Deleting Licensing Info

not allow changes to Configuration of Audit database

in Settings not allow hot backup durations, cluster members, Reset Account Activity - Peak Licenses user

We are using BO 4.0 SP5 Patch 5.4 on a windows server.

Thanks

Abdul