Hi Suwandi,
You can assign Monitoring User Group, see User Management for the AEX (PI-AEX) - SAP NetWeaver Process Integration Security Guide - SAP Library
However still read-only access to ESB & IB is possible. This should be sufficient.
Best Regards
Harald