It would be beneficial to have the possibility to specify the permissions for e.g. delete, modify, create host separately so the user can have the possibility to have the right to create new host but cannot delete it without super admin permissions as a example. Currently there are only: read-write, read or deny options.