Roles have been extended with an Environments permission, which controls whether a role is allowed to manage and access sandbox environments.

Visit https://www.contentful.com/developers/docs/references/content-management-api/#/reference/roles to see how this new permission can be used or enable it using the WebApp for a role of your choice.