I am attempting to limit an "operators" team to a select group of nodes for management. However, I want them to ONLY be able to move Nodes between Managed and Unmanaged for maintanance purposes. I do not want them to be able to add/delete nodes, change SNMP strings or listed resources, etc.
The "Allow Mode Management Rights" account selection seems too broad in that any memeber of the "eyes on glass" team could delete a node at any time. Is there any way to increase this limitation to prevent this potential risk?