by giving the role DeployJob.ModifyProperties, the role is able to change the parameters (which i want) but they are also able to change the job settings like logging level, name etc... (which i do not want them to do).
Can you open a ticket w/ support on this, I'm not sure if that's intended behavior.
I'm in the same situation that you was before. Did you received some reply from Support about that?
There is a rfe for this I think, but it would not hurt to submit another one.