Permission Set to prevent Tree branch moves

[sw41]

Is there a permission set I can tick to allow people to move machines between system tree branches but not allow them to move the system tree branches??  

We just had someone move an important group nesting it with in another group with conflicting policies.  I would like to prevent them moving tree groups all together.

[cdinet]

Unfortunately, that can't be separated.  The permission is:

Edit System Tree groups and systems

So that indicates it is all or nothing.  You can submit an idea to have that separated, but it may take a while if they decide to implement that.

https://community.mcafee.com/t5/Enterprise-Customer-Product/ct-p/enterprise-ideas