I think that there needs to be a way to give them people access to access port but not trunk ports. I also use NTA and want people to see routers but not be able to change them. If the option is already there i might have missed it but didn't see anything.
