Hi @shed ,
Yes! you can do it.
1. find the system in system tree and click on the checkbox next to it
2. click on Action on the bottom left> modify policy on a single system
3. select the policy, eg for on access scan, select threat prevention
4, duplicate the policy
5. uncheck on access scan and save the policy
6. do the same for all other modules if you want to disable them as well, like firewall, access protection, web control, exploit prevention etc
7. save the policy
8 click on system tree again and select the machine> actions. modify policy on a single system> edit assignment> break inheritance> select the duplicated policy
9. click on wake up agent
hope this helps!