Hello CBZ9104,
Have you tried to copy an existing security role and then just take off the permissions you don't want that new role to have?
For instance, select Console Menu, if you want them to see the "Push Symantec Management Agent" page, give them Read access like the image above.
Regards.