Greetings.
I try to find the similar problem, but haven't succeeded. So, when I assign SDGuest role for my technicians they can't edit Requests so they can't manually set Resolve status. But if I assign SDAdmin role, or role that I manually created with request change rights they can change everything in the Request. Is there a way to give them option to change status to Resolve and add resolution, without changing anything more?