I am trying to set up the correct permissions for Applications creation, modification, and deployment. We have a central IT area that builds Applications for our entire organization to use. We also have distributed IT around the organization that takes care of each department. We have maybe a dozen of these IT groups.
We have site licenses for a lot of our applications so our central IT department builds these applications for all distributed IT areas to use. We only want the distributed IT areas to be able to deploy the applications, nothing else. The issue is that the each distributed IT area has specialized software that only needs to be distributed to their managed computers. Is there a way to allow these distributed IT areas to have deploy only access to the central IT applications but have full modify, retire, delete permissions to applications they create? I have only found a way to give the distributed areas full access to all applications or deploy permissions with create only. Create only does not allow the distributed IT area to modify or delete their application.
I would think there was a way and I am just missing it.