duplicate app security rule for users in QMC

[124psu]

Hi, I am hoping this is the right place for this question.

I want to let my end user be able to duplicate my apps published onto a stream. I create a rule specifically for this one user so that they can go in and duplicate apps published into shared stream in the hub. Problem is they are getting the "no access pass" error when trying to duplicate an app and also for trying to create an app (figured out through testing). Not sure what else gives.

They are currently a content admin only as a role. Also have the security rule tied so that they are allowed to duplicate apps. 

This is my user access on the application level. My user is the 4th row down. I think the UDP needs to be selected as well but having a hard time getting that to work. Can anyone shed some light on how to achieve this?  

[Andrew_Delaney]

Do these users have analyzer or professional licenses?

Analyzer users cannot create apps, so you may get an error message like this because the system is checking if they have access to a professional license.