Remove capability to disable notifications?

[matt.uebel]

Suppose I want to make a user incapable of disabling notifications for hosts and services, but don't want to otherwise effect other capabilities. How is this possible? If not, what setting otherwise needs to be set to disable this capability, and what extra limitations would this impose on the user?

[abrist]

The user would have to be a "read-only" user. They would be unable to change configurations nor submit any commands.