It should be possible, but you will need to play around with the security rules.
Probably the easiest way to do this is to create a new admin role with restricted access to the streams menu in the QMC and assign that to the user.
The current roles allow full access to the parts of the QMC that they're able to access, so they won't suit your needs.
My first question is who do you have logging into the QMC and what are their roles?
I think you need a custom rule based on a Custom Property that you create. The rule would be defined for Streams and Apps and would give read access only if the user had the correct value in their User Custom Properties.
Something like below. QlikGroup is the Custom Property that I created.