properties

Hello, I try to figure out if it is possible to create a Proxmox (pve, not system) user that can login over web, check the state of the KVM VM (but can not change the machine's properties) and also can stop/start/reset the VM. The idea behind is that we have night shift person who's on duty to...