Give read only access to hardware model but complete access for hardware asset

[Anyhow]

I have a requirement to give a group only read-only access to the model table but give complete(create, read, update, and delete) access to the asset table and that group should have access to HAM mobile features as well.

I have to create three groups one with read-only access to the model and create, read, and update access to the asset table and access to HAM features in mobile. The second one has everything similar to the first one except it should have delete access for the asset table and a third group with every access in HAM for the asset and model table. 

The catch is a single user can be in multiple groups and if he is in the group with greater access it should have those capabilities.

[Muralidharan BS]

By default users have read access to both the models and assets. there are separate roles for write access though asset and model_manager. 

So you can assign roles accordingly to the users to grant them right level of access. Also note this will also grant them delete access so review the roles before granting it directly.