Secure Score role for project managers

Hi there

As far as I can understand, some sort of admin role is required in order to be able to work with improvement actions, change status for an action, etc.

But what if we wanted people to be able to work with the planning of these actions without giving them the admin rights to actually make the changes? To me, the Security Operator could be one such role, where they could update status and write notes without being the ones to actually carry out the changes.

An alternative might be to have it all sync with Planner, but that's maybe a little further out...

Did I understand correctly or is there a way to achieve this today without assigning admin rights?