To be able to create more specific roles. For example one requirement that we have is for devops users to be able to create WAF exclusion rules.

Desire is not to have access to change anything else on the LB.