OPM SS6 Write Permission

I want to make some changes to our network builds and start to lockdown the parts of the build that users don't need write access to. Is there anything that covers this sort of thing for OPM?

Thanks,