End User enable disable NAT Rule

RouterOS Scripting
1

Hello,

Do you know for a way that an end user (manager) to be able to enable and disable NAT rule. For example to control access from external company to local resources. I have looked for a web-skin functionality but if I give access to the nat section the user can also remove nat rule and the buttons are quite close to each other. The routers are on version 6.

Thank in advance

2

Use script that detect port knocking.
The sequence determine what rule disable or enable, or create your own API on php or similar on a separate program or webserver.