Unfortunately, it is not possible to restrict modification of GraphML files.
If you want to provide a read-only diagram to someone, you will have to export your diagram as an image (PNG, JPG, ...), vector graphics document (SVG), or a PDF document and share the exported image/document instead of the original GraphML file.
Of course, images and SVG/PDF documents can be modified as well with the right tools - just not in yEd.
Another option would be to host your files on a file share where you and your department lead have read and write permissions but everyone else has read permission only. This way other employees can only modify local copies, but not the original files.