Hi @dibeesh,
Typically you will set up your prod and dev environments in seperate tenants. This will guarantee isolation between the two and would solve this issue.
To do this you will want to name your roles specific to the application. For instance, you may have a Marketing Admin role and a Accounting Admin role. This doc may give some insight, but it doesn’t mention this solution explicitly:
Users aren’t application specific, they are connection specific. This would likely be addressed if you set up seperate tenants like mentioned in the doc above.
Let me know if you have further questions.
Thanks,
Dan