When the App Import functionality is enabled on instances, instead of extending the access to all roles that can build apps:
Application Engineer
Tulip Table Supervisor
Connector Supervisor
Station Supervisor
Administrator
Account Owner
it would be beneficial to have a feature that allows Account Owners to designate individual users, a select role, or subset of roles, to perform app imports. This would make access more granular.