Quite possibly, tbh I've never looked at this. Having said that though I still think the preferred option is to have a SAML role that gives a user access to the Sensors only so they can see alerts, download reports etc. basically everything other than configure the sensors/alerts.
I will add MQTT to my list of things to look at, thanks.