Role to execute Workers REST API

Summary:

In order to update from the EMPS REST API to the Workers REST API, we add some changes to the roles for our recruiters, but this changes from our recruiters, but these changes enabled users with those roles to have access to updating worker images, something that should not be enabled for users. Is there a way I can enable the Workers REST API to run without image updating being enabled?

Content (required):

Version (include the version you are using, if applicable):

23C

Code Snippet (add any code snippets that support your topic, if applicable):