1. Create role based on User or Admin role. Check all options to work with problems

2. Create user with this role and include it in User group that has only READ access to some hosts
3. Try to close or change severity for some problem. (To close problem there is corresponding option checked in trigger settings)

If we include user in group that has write access to hosts - all options will be available even if it is User role type