What I am trying to achieve is give our business team permission to create/edit/delete and activate rules for only our staging environment
example : staging.site.com
Then when they have finalized their tests, have other person activate it for live production environment
example: site.com
Currently we had to deny 'activate' rights to them because of the risk of harming production. The down side is I have to activate/deactivate their rules 15 times a day while they develop them. (their rules are manually configured restrict to our staging site).
Am I missing something? There must be a better way for the team to test their rules without having to ask me to activate it? If i give them permission to activate, then I can not guarantee that they wont abuse that privilege push to production without IT being aware (and potentially causing a site outage).