Yes, simply invite the user to the deployment instead of the app like this:
$ cctrlapp APP_NAME/DEP_NAME user.add email@example.org
For details and also how to set the user's role please refer to the documentation here: https://www.cloudcontrol.com/dev-center/Platform%20Documentation#users