Hello,
Please vote for a new idea regarding security role: Create a new role based on environment manager and remove the service request permission on the Production environment.
Best regards.