There is no way to control concurrent logins.

Not sure about your 2nd question... what do you mean with "no modification" ? You can certainly create a user with no permissions, so they will see status but won't be able to perform any kind of actions.