It would be nice if there is a way to profile a user so that they only have access to the Overview section in the Web App and API Protection Workspace. This is for a user that only wants security and performance insights into their applications.
This would prevent unauthorized access to Firewall configurations, service policies and other exclusions, ultimately limiting the possibility of an insider threat.