Restrict certain VBS project users to only package and deploy but not change other artifcats

Summary:

Segregation of duties for deploying the VBS projects

Content (please ensure you mask any confidential information):

We have a different team currently in place, who is responsible for deploying the release items to higher instances for Fusion HCM changes for sanbbox or FSM packages. Similarly, for VBS projects, we want to have these members added to project but only should have access to deploy jobs but no other access should be given such as Workspace, git, etc etc.

Can you guide which role will full fill my requirement.

@John Rhodes-Oracle

Version (include the version you are using, if applicable):