Application role that allows to assign user to groups in EPM but does not allow to recreate service

We are planning to integrate with SailPoint IIQ for provisioning to assign roles to users in Oracle EPM modules? SailPoint requires Service Administrator role to assign roles to the users in EPM applications. This also allows SailPoint IIQ user to recreate the service. is there an application role that will only allow SailPoint IIQ user to add or remove users from groups but not have access to recreate service?