Advanced configuration of access rights for WebUploader

Good afternoon. Purchased NCM for our department. 3 network engineers and a junior network engineer (little experience).

We want to use roles to differentiate access for junior employees and system administrators (execution of scripts and templates).

But when choosing the WebUploader role, employees can change and delete scripts and templates.

What do we need:

  1. Script Management - Prohibit creation\modification\deletion. Only the selection and launch of ready-made scripts. The change must be approved.
  2. Config Change Templates - Prohibit creation\modification\deletion. Only the selection and launch of ready-made templates. The change must be approved.

Allowing junior employees (and system administrators from remote offices) to delete and change scripts and templates is very risky. They only need to launch ready-made solutions.