Hi Jim,
Today there is a 1:1 relationship between AD users and JetStream containers. Meaning, there's not a way to allow distinct users to control a Jetstream container. We do, however, have it on the roadmap to allow multiple distinct users to contract the same Jetstream container. The most common use case that we've heard are that there are single containers for multiple users, and while there general team leads, sometimes that person is unavailable to execute the operation (e.g. refresh).
Is that similar to your use case?
Jason