iControl REST API config sync for operator user

You can't customize the user roles, just say what partition it applies.

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-user-account-administration-13-0-0/3.html

I personally hate the automatic sync, however, if you don't want to change the user role, that looks to be a simple option for you. Just dont forget to enable the save option when using automatic sync. Anyway, that has no impact to the devices itself.

I don't like that because I lose the easy option to rollback syncing from standby to active.