Set rules without query acess

Hi everyone,

I have specific needs of a brazilian customer that need provide access by web console for external users that work out of company, but the customer no want give to them the access to query and reports. The users should have access only to list of devices defined in your scope for the remote control. The system don't have the rule condition to no allow the access to query.

Any Ideia, ?

Thanks