after we set up a person profile with share-person=two, than the third person will not be in a position to login on UMv6 untill among current link logout / disconnect. Usually it is possible to make it possible for or deny acess to some service (inside your scenario winbox) applying in-interface