HealthShare UCR User Roles

Hi anyone has created the user roles for UCR pls share details like if we want to create following roles what access rights should be give to each role.

UCR Admin - This user can stop/start productions, can enable/disable services, can run sql queries, can make changes in facility registries, assigning authority and other configuration.

UCR Developer - This user can add new services in the production but can not make any change in the registires and other configuraiton

UCR Tester - This user can not stop/start production, enable/disable services, make any changes only he can view the message logs, error logs, view registries data, run sql query but no insert/update statement etc 

anyone has done something like this?