We’d like to allow development teams to freely manage selected rules, while blocking the ability to disable/change some.
I found that there’s a global setting that allows for deactivating rules in an inherited profile. This doesn’t allow for selectively blocking rule editing.
Profile editing is either on for a user or it’s off. There’s no middle ground.
What I suggest is a core profile of the rules you want to lock in place. Let your users extend from that profile to add rules, but turn off the ability to remove inherited rules.