We need another type of Zabbix admin user level who could only enable/disable things, but couldn't add, edit or delete anything.
This is very useful for environments where sysadmins need only ability to turn on/off some trigger or schedule maintenance. And all the real configuration of Zabbix is made by Zabbix admin who has knowledge about applying right templates and so on.
The main concern at the moment is that we can't prevent sysadmins doing accidental or other changes to the configuration whitch we are not aware of.