Config Change Template Permissions

Hi,

I wrote a config change script and i want our level 1 support to use it so they must run it but shouldn' t modify it. I tried all combinations from account roles about NCM permissions but everytime the same result. If they run it also they can modify it.

Does anyone know how to give only run permission on config change template screen?

Thanks,