How do I limit permissions on specific device collections?

[SandyPro]

Is it possible to set different permissions for device collections?  Example: I have 3 device collections called DC1, DC2, DC3. I want to allow a user to "read, modify & delete" for DC1 but only allow the user "read" for DC2 & DC3. Thanks in Advance.

 

[GarthMJ]

Yes you can do that and there are no tricks to this. 

[SandyPro]

Under the 1st security role/scope/collections (Ops Admin DC) to the user account. It doesn't allow user to add devices to any of the collections or modify the queries.  I set the security scope to all folders under Device Collections except helpdesk & testing. Tested the access to the collections & it works fine.  I add the 2nd security role/scope/collection (HelpDesk-allows user full access), assigned to the remaining folders, open the console & the user account takes the permissions of the 2nd one for all folders & their device collections. What am I doing wrong?