Use password protection to stop changes to a role. While a role has a password, its settings are read-only.
Set a Role Password
Go to Configure > System Configuration > Roles.
Click the lock icon in the upper-right corner to unlock Configure for editing.
Select the role.
Select the Password check box. The Create New Password dialog box opens.

Enter a New Password, and confirm it in the Reenter Password field. Then click Set Password.
Remove a Role Password
Select the role. If you are asked for the password, enter it.
Clear the Password check box. The Remove Password dialog box opens.
Click OK.