ArgoCD RBAC configuration

[Archyl]

Hello,
My name is Archyl, and I am a Lead DevOps Engineer. On my current project, we use ArgoCD. I am looking for a solution to protect any ArgoCD application in my project from manual changes through the UI by the "QA" or "Developers" teams, except for the ArgoCD application version.
The main goal is to configure RBAC settings to provide the "QA" team with the ability to change only the "targetRevision:" field and sync it in any ArgoCD application, instead of providing full access to a specific project or ArgoCD applications.
Thanks in advance for your assistance!