When creating a new service you will be able to select the option to "Block Edit" or not.
If you do "Block edit" the system will block edition for those users whose roles do not have the "Can Block services Updates" permission.
Only users whose rol has the permission will be enabled to make editions.