Restrict authorizations Incident Management

hello,

I've setup incident management work center but as it is now key users have full access to message processing, they have full access to crm_dno_monitor transaction, only to messages created by them but still I would like to restrict access so they can only reply or add attachments. Where can I configure this?

thanks in advance