Is there a way to restrict an user so he has only the right to reboot the router and to restore the configuration from file (but not the right to upload the configuration)?

Yes, add user group with policies reboot,read,write