Hi there --
I have access to do deploys in prod, but I don't have access to the wmf-deployers group. This led to issues today when I wasn't able to merge and deploy the config change that fixed T200346.
Timo mentioned in #wikimedia-releng that there might be some other permissions that are needed. Here's what he said, I don't have any good way to evaluate whether there are other changes that are needed.
There's a fair bit more on-boarding for mw deploys than for other deploys, including (not sure if official or not) access to mwlog, mwmaint, (which have their own group I think), and ugroup wikidev / sudo mwdeploy (not sure how that is granted), and things like Logstash but afaik those are ldap/nda ldap/wmf all.
The Wikitech docs about getting this access just say "ask someone who has access", which seems a tad informal for what's a pretty powerful set of permissions, so I'm hoping that tagging RelEng will get it to the right place (or get it noticed by someone who knows what the right place is).