In terms of support, we have some helpdesk employees who have restricted access to the K1000 admin portal. In case a software deployment fails, they should be able to restart the managed installation, which is usually done by selecting the "Run Now" button inside the managed installation. By giving the permission "Write" for managed installation, the users have access to features which they shouldn't be able to use, like i.e. the "Delete" button.