Good time of day!

I have a question:
How do I prevent IT specialist to edit some fields in a designated service call him?
Menu management roles can only enable/disable editing of all fields.