How do disable SEP buttons from SEPM?

Hi, we have SEPM 14.x on our Win Server 2012 R2 Standard. Our clients are Win7, they have SEP. I want the clients to be able to open the SEP gui, but many of the buttons should be disabled. For instance - in the SEP left menu there is "Change Settings". Under this menu there are many "configure settings" buttons - for instance for "Virus and spyware protection" etc. I want these buttons to be disabled. I have seen this on a 12.x system. Se attached printscreen. When I hover my mouse over the "change settings" button a messeage open "Your administrator has locked this feature". How do I configure the system (SEPM) to be like this?