Drone deploy to restrict group of users


I’m trying to configure DroneCI to enable deployments to production/staging environments.
However, I need the drone deploy command to be restricted to a subset of users (can be the same as DRONE_ADMIN, tho). However, all users are free to push, PR, tag. Only deployments need to be restricted.

Is there a way to achieve it?

Thank you in advance.