How to restrict access to 'Reset Password' and 'Add Role' from Security Console for a specific role?

Summary:

We are building a custom role which will give users access to Security Console, however they should not have access to following buttons -

1. Reset password 

2. Add Role

We tried using Page Composer personalization but cannot edit these components. Also, looked at specific but it looks like there is no way to split out these options from the role.

Any pointers to achieve this requirement?