Add Granular Read/Write/Delete Role Permissions

I would like the ability to give different IT admins granular read/write/delete role permissions. For example, I want someone to have the ability to view all phone numbers, but not the ability to delete it or to change it. I want to give someone the permission to view the Auto-Receptionist settings, but not change them. Or the ability to update call queue members but not to delete it.