Restriction of access rights to read and write tag values is set in the security manager. To do this, you need to set permissions for a role from the Data Access category. Thus, all users associated with this role will only have the selected set of rights.