Add submission manager role, tweak default minimum_role in code to 'manage_options'
Tie down custom post type registrations and limit 'show_ui' to those with access (min role or submission manager role)