Is there a way to restrict permissions inside ServiceCenter?

I would like to create a user that can only see reports, but can't upload or publish. How can I do that?