I would like to be able to allow any technician or administrator to place a system in a managed or unmanaged state. But, I don't want them to be able to alter the node configuration.