We need a way to differentiate between reading and writing rights within an authorization role. Our project managers should have read rights for all projects, but only write rights for their own projects, in order to be able to edit the performance level, deployment planning, etc.

Could this perhaps be regulated by hiring the project managers?