How limit which environments somebody can perform a build?

We want to split who can perform a build to deploy our application to allow anyone to deploy to dev and sit environments, but only members of our production support team to deploy to uat, pre-prod and prod.

I know I could add privilege for each environment somebody can deploy to but that seems like a lot of work. Is there an easier way?

Thanks

Hi Andrew,

You'd probably want to use Active Directory groups of some sort... but you could either add explicit privileges or add deny privileges to the groups you don't want to go to prod.

Just keep in mind, however, that deny takes precedent over a grant in the same scope. IOW, if you say "X can deploy to A" then "X cannot deploy to A", then X will not be able to deploy to A.

Steve