Hi, I need to give only PPP , Interfaces, IP HOTSPOT and LOG read only access to my staff in winbox.
But I dont see any feature how to achieve that.
Is it possible ?
No. You best choice would be to write your own PHP based app using the API to let them do exactly what you need them to.
You can design skin with specific menus, and create user group with restricted rights and force that group to use that specific skin. Simple description: http://mum.mikrotik.com/presentations/PL12/pawel.pdf