Hello!
You can define permissions using roles. You can find the setting in Setup → Roles & Permissions.
You could either configure existing rules or copy an existing one and change the “Reschedule checks” setting under “Commands on host and services”.
Hope that helps!