Under Permission Settings > CRM Tools there is a toggle for Edit Associations. Currently it is all or nothing; however for our organization this poses some problems.
We want to preserve a user’s ability to associate parent/child companies, or association labels for contacts. But we don’t want them to edit associations with Tickets, Services, Courses, and a few of our Custom Objects, as these are part of sensitive automations and processes.
There can be many permutations of object associations, I’m aware. Ideally we would actually welcome that degree of control, however a compromise could be an object blocklist; this user cannot change any association that involves these objects in any form. This would reduce user interface complexity and ultimately serve our purposes.