Ability to modify Role Access on Modules / Lists / Actions on a deployed model without ALM

I'd like the option to be able to change a module's role access in our live production model, which uses ALM to sync changes from our development model. 

This would be the equivalent of selecting production data on a list.  This option would help because I wouldn't have to push ALL changes (including those still in development) in order to modify role access on something completely unrelated.