You would like to use the GFI LanGuard Console server only for scanning purposes and not for remediation operations.
It is impossible to restrict the LanGuard functionality to scanning only - the LanGuard console has no user roles or access controls. LanGuard performs operations either with the service account running the GFI LanGuard attendant service or any other alternative credentials used to carry out operations. These credentials have full access to all functionalities within LanGuard.
If you want to see this functionality in future versions, you can submit a feature request directly to the product management group.