Depends what you're after, if you want them to have access to Web Inbox but not be able to delete messages, that's not possible as John mentioned. However, if you want to prevent users from having access entirely to Web Inbox to prevent them from deleting messages, you'd just disable Web Inbox from the users' assigned Class of Service.
