Granular Permissions Control

We need more granular permissions control. For example, the permission to upload to Intune should be a seperate control. I should not have to grant Org Admin to a user that just needs to manage packages in Robopack and Intune. This breaks Least Privilege models.