Add a new item to the groups: Only turn on and turn off wi-fi. Analogue reboot. Now to make it possible to enable wi-fi, you need to add a user to the group for which you can write settings. But this user has the ability to record any settings. It's not safe.
Since On the mikrotik there is no button on and off wi-fi (as on other models of routers) using the script you can do it safely.

How about 2 scripts.

I think that the idea is to enable/disable possibilty of turning off/on WiFi.
If it is CPE device then user wiill not be able to disable radio link. What about other settings such security, channel etc. ?

Wow, many thanks for this. Must note and remember for the future use.

You can allow the user to change all settings or prevent all settings from changing. There is no way to change the wi-fi on and off settings only. Where to write to make this function?