Since attributes themselves are either of type runtime or configuration, a further distinction of priviledges is not needed. IMO the attribute priviledges "read" and "write" should be sufficient.