How does the GitLab CICD function make a specified project member perform manual execution

Question

Our developer has the authority to Maintainer, but I do not want him to be able to manually execute an pipeline in a production environment. Is there any way that a designat