Insert only or write once access to a collection or database

Requirement:
Ability to create a user/role which can insert data only.

Rationale:
In some use cases there can be a separation of concerns from the system writing data (e.g. adding items to a queue) and the system process the information (e.g. reading and updating the queue). Right now, there is no way to control access by operation, so both systems can read and write data from the same collection / database.