Engineer users should generally only need read permission on master docs.
Exceptions would be:
@Rick_S Thanks for the reply. I was pretty sure about the first part, but your exceptions were very valuable. The first one is something we are just about to roll out on one of our apps, so this was very helpful to know.