Acknowledging & Enable/Disable Permissions

In our quest for a more distributed environment, we have a need to allow
a select group of users the ability to acknowledge alerts, but do NOT
want to give those users the ability to enable/disable any of the
services.  It appears that a given userID/password will allow both.  Is
there any way we can restrict this to disallow the enable/disable
ability for some but not all?

Thank you.

Peter Murray
Computing & Media Services
Syracuse University
Syracuse NY 13244
<user-2f8a5f2ec641@xymon.invalid>