When users log in to the hub, they cannot see the "Work" stream, despite the fact the they should be allowed to create apps.
As background, the "Work" Stream is an alias for unpublished apps which a given user has read rights on or is enabled when the user has create rights for apps.