Role-Based Access Control (RBAC) restricts network access based on a person's role within a project. We can define Roles such as Create Tag, Edit Tag, Delete Tags and can restrict users as needed.
Administration section on Plant Sight web portal has all these features under "Team Members"
Incase user tries to perform Edit/Delete operation, proper warning message will be displayed in Data Manager: