Satellite 6.1 hammer CLI granular permissions

I am currently working on assigning granular permissions on a specific site within our Satellite installation. I would like for the users to be able to update content-hosts/manage tasks (this one I've got) via hammer and that's it. Is there a specific role anyone is aware of that will accomplish this? I've tested site manager role and it will not allow the use of hammer commands on the specific site.