After adding constraints for logging (logger and logging-profile), the Deployer role can't edit either logger data in the web console.

<constraints>
<application-classifications>
<application-classification type="logging" name="logger" application="true"/>
<application-classification type="logging" name="logging-profile" application="true"/>
</application-classifications>
</constraints>