I find it completely wrong that for me to have a user work on an actionable alert, that Ihave to give them read/write access to the environment

I think having the ability to make a customizable role. That I can have more granular permissions.