Terraform Challenges - Infrastructure as Code RBAC (Role Based Access Control)

One feature that running infrastructure-as-code through CI/CD pipelines is missing, is the concept of code execution permissions. VCS can manage the permissions of "Who can change the code" and "Who can approve the code", -- all concepts around the creation, changing, and control of code. But when it comes to infrastructure, this code represents real cloud resources, and we need a new concept of "Who can execute this code?" and "Who can execute this code in dev/staging/prod?"