I installed BNA 12.0.2 then I gave operator permission to some users to access the BNA. All configuraitonal sections disable but switch enabling and disabling options . I created a role with only ReportsRead and then assign that role my users. The result is the same. My users can enable and disable the san switches with minimum rights.