Separate Users for LTM & ASM

i have box running LTM + ASM

 

i want to create a user who can only do LTM stuff

 

while another who can do ASM stuff

 

as both are managed by different teams , how to do that ?