AWS CloudFormation StackSets now allows you to create multiple roles in which your users can perform stack set operations in target accounts. This allows you to restrict specific sets of users from using stack set operations such as creating or updating stack sets in specific target accounts. Please see the documentation to learn more about creating multiple roles.