Create a new option in RBAC that disallows a user from modifying ONLY a maintenance window, but allows for other device collection changes.
Currently if you disable the modification of settings in a device collection through RBAC, you cannot modify ANY settings. I wish there was a way to only disallow the modification of Maintenance Windows.
Luis Gonzales commented
That is a good to have