At this point the only roles are Admin and Ready Only. It would be great if there was a "custom" option where you can decide what a user can do. That way you can create accounts that only are allowed to edit the Whitelist, Blacklist and Time Schedules.
Besides this it would be nice if you can assign accounts to Deployments, so they are only able to edit the policies that are applied on their network.