Using the Protection Function
If you want only the owner of a request to be able to add more users, then you can protect the request.
To do this, select the request and choose Request/task
Use the Remove protection function to remove this restriction.