hi
for a user to create his own apps , all he need is professional license
no need for a role
if you want the user to also publish the app to streams , define access to stream and more
you can give a content admin role .
if you want something in between , than you can start writing your own security rules