We know this is possible in Big-IQ.
Below requirement is to achieve it without Big-IQ and directly in the Big-IP.
Is it possible without Big-IQ ?
Admin-A (Group of Admins) should have access only to LTM, DNS and System Management can do any admin activities and analysis.
Admin-B (Group of Admins) should have access only to APM, AFM, ASM/WAF can do any admin activities and analysis.
Super Admin: Should have all access.
Also, please let me know if these requirements can be achieved only in Big-IQ what more granular level of control Big-IQ can provide.