IPAM Permissions

Yes, the persmissions for IPAM and NPM are seperate. At the moment, IPAM only supports Roles and you cannot delegate permissions to specificy groups, supernets, or subnets, but you can set the role for all of the IPAM items and give the user account limitations in NPM. 

When you edit the user, lock down their NPM permissions at the top of the user management page. Then at the bottom, there is an IPAM section where you can give more permissions (like operator) if you want them to modify the data in IPAM.

Mav