Add a read-only security role to staff users or change the default permissions and have another role to grant more rights

Staff users should now be read only by default. To give them access to alert data, there is a "Staff Full Access" role that can be given to the staff user.