Is it possible to limit person on hold jobs

My organization has may people, and my workflow has a hold job between build and deploy, I just want some people have permission to allow deploy and click the hold button, is it possible? how should i configure my config.yml