We'd like to be able to restrict users from making changes to certain properties of objects but still be able to change others. For instance, we may want a user to be able to change a subnet's vlan, but not the display name of the subnet.
