Permision logic

[mishadib]

We have a company with 3 data centres and a bunch of normal office branches... where we have some racks for routers, switches things like that.
We built the datacenters in netbox. Now we would like to ask the local helpdesk teams to contribute and build their offices in the netbox. We would allow them to see the datacenter infrastructure but I don't want them to be able to modify it. I am trying to use the permissions but, I didn't manage to come up with a way that they can build their offices from scratch. My only idea is for the superusers to create each branch office, tag them as helpdesk.. or use tenant helpdesk and then make the filters to give them rights to modify the objects having either the helpdesk tag or tenant helpdesk. Is there any other way?