As a security administrator, I need to be able to assign a support role that has production rights only, but no rights to pre-production environments. This is to keep in line with PCI DSS requirements for separation of duties whereby developers do...