Segregation of Duties Between Admin and Designer

I want to ask those users who have had to make their Appian instance SOX compliant.  Our audit team is wanting us to be able to limit to Sys Admins the ability to deploy packages into Production.  Can this be done and the user still have all of the accesses to the Designer in Production?  Basically you want to show/hide the Import button in Production to only Sys Admin's .