iControl REST Interface: Least Privileged Access

In v12+, you can use role/partition combinations to limit change control. For example, you can use the Manager role on a user assigned to a specific partition, and whereas they can see objects in Common, they cannot change them. For a code example, see my answer on this post.