I'd like to be able to customize permissions. For instance, I would like an AD group to have the ability to set and remove alert suppressions (operational) but not have admin access to the monitor (administrative).