We have three environments: DEV, QA and PROD.
Currently, developers can deploy to DEV, QA and PROD environments without limit. But all developers know they are supposed to deploy to DEV only and most of them do the practice well.
However, SQA team asks me to limit developers to deploy only DEV environment to be sure.
I know there is environment option under the team menu but it turns out it limits the variable access as well.
We do not want to limit them because they are the people well know the variable values in each environment and they are always changing them when needed.
Is there a more sophisticated way to achieve our goal?