Scenario: Interns can create apps but cannot interact with their own data.
Environment Maker role: Can create new resources associated with an environment, including apps, connections, custom APIs, gateways, and flows using Microsoft Power Automate. However, this role doesn't have any privileges to access data within an environment.
System Customizer role: full permission to customize the environment. However, users with this role can only view records for environment entities that they create.
Reference:
https://docs.microsoft.com/en-us/power-platform/admin/database-security