It appears that when you create an additional "Operator" user in EventLog Analyzer, they can still access the Database Console feature even though it's meant to be disabled to all except an Admin.
See pic attached.
Also I'd argue that an Operator should not be able to change mail server settings, yet they can do so - is that meant to be?