Many thanks to Alok, Gianni, Jahnavi and Joshua for your responses. For now I have disabled export and print options at dashboard level, and will in parallel explore the option of creating a new role inheriting an existing application role.