user access control in NFA

is there any way in NFA to allow a user to create and view reports, but not edit devices? I would prefer to allow them to create new reports, but not change old ones, but I could live with either no change access to reports or full change access to reports, as long as they could see the existing ones.