So I ran an audit of an unpublished sheet owned by the user highlighted in red. The audit thinks the user should have permission to publish. (The user in black is another test user, the users in grey are the service accounts).
BUT ... the user definitely doesn't have the option to publish.
Am I auditing the wrong thing?
Don't know if this will help, but here's what my custom community contributor rule looks like. My contributors can not create apps, so this works for me.. Make sure to select the publish action. Mine is selected, even though it's not showing on the form. I must have used the wrong template or something.. Also make sure to set the context to only in hub.