We have customers that have different teams to support the production environment. Some of these teams should have only read rights to be able to see the health of the environment. Today, all administrative tasks gives permissions to change settings.
Example: Teams should be able to see Nodes & Services, but not be able to restart any server or apply any changes. Be able to see all the library and edit files, but no be able to edit permissions. Be able to see all configured schedules and routing, but not be able to change or create. In summary, only read permissions.