Regarding Permissions And Roles

Hi Everyone,
I am new to GenieACS and was wondering, if there is a way to assign permission to certain roles in which they can update the Firmware of a device from ONU device page, but are restricted to download the firmware from Admin Tab.

I have created a read-only permission to Files Tab in Admin and assigned to some users of GenieACS,
But, the user can download the firmware, which I don’t want to happen.

I would be grateful, if anyone could provide some insight on this topic.
Thank you in advance.