We have multiple policies which require approval before making a change. However, the schedule can bypass this security policy.  AAP must have a scheduling role that can prevent users from creating and using schedules.

By creating RBAC for the "Schedule Role", then we can manage permissions similar to other roles.