A user with monitoring permission only cannot create, delete or modify any information in the Web console. Neither can they create or modify report send tasks.
The user can:
Change their own credentials.
Access the groups assigned to them, and view the clients in those groups as well as their profiles.
View the content of the Comment field for those clients they have permissions on.
The user can:
View the licenses automatically assigned to clients in groups they have permissions on.
View the licenses automatically renewed to clients in groups they have permissions on.
Access the license assignment history and view the licenses assigned to clients belonging to groups they have permissions on. However, they won't be able to clear the clients' license assignment history.
View the licenses imported by other users (accessing this information through the Import licenses link on the Status screen).
The user can:
View scheduled tasks to send extended executive reports to clients they have permissions on.