How to control or restrict OTBI access?

Summary:

We need to control OTBI access from accidental deletion of a folder/report and moving reports from one folder to another from business users?

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

25C (11.13.25.07.0)

Code Snippet (add any code snippets that support your topic, if applicable):I have created a BI Abstract role and added a BI Consumer role and added this new role to our /Shared/Custom folder with only Read and Traverse options along with BI Admin with Full access. Assigned this new role to few users (IT and Business users). By doing this I am able to achieve the following: