Allow adding a permission, while denying Remove/Modify a permission

I am trying to find a way to allow a user to Add a permission to an object (ex:VM folder), while disallowing them to Remove/Modify already existing permissions on the object. In a similar fashion as I am able to allow creating a folder while disallowing deletion of a folder. Is that at all possible?

Many thanks.