Permissions for setting configuration parameters

The following rules govern who can set configuration parameters: