Permission templates for deployments

Customers with many or complex environments would like to have the same permissions applied to all of the deployment environments of the same type.

For example, all of the "Dev" deployments could have the same permissions set allowing only developers to deploy there, and all of the "Prod" plans could have permissions that would not allow developers to deploy to a given set of environments.

Rather than statically assigned groups, this would apply to the type of environment (prod/test/dev/etc)