add or change roles

[thiagoawstest]

Hello, I have a Databricks environment provisioned by AWS. I would like to know if it is possible to add new roles or change existing roles. In my environment, Admin and User appear. I have the following need: how can I have a group, but the users that belong to this group cannot create jobs or create clusters. They can only view, that is, be a Reader of the workspace. I can define IAM access permissions for the workspace through Azure, defining the group as "Reader", but I cannot do it this way in AWS. What would be the best practice? Thank you.

[thiagoawstest]

Hello, is there any documentation or example of how to create IAM roles to manage jobs and clusters, to have read-only access, and prevent any user from creating new resources?

Thank you.