Once a user gets designer access, then it can create applications but I would like to have more control over that so then I want to give access to designer but not allowing all designer users to create applications (they would only be able to create objects within the applications they have been granted access to).
Discussion posts and replies are publicly visible
I don't think that you can control who can create apps.
Can you explain your use case in more detail?
The point is controling POC and test cases so they can only work with the apps we create for them and not end up having 20 apps created by those users.
I understand. I think this is something you will have to solve by communication and education.
But, to be honest, I am not 100% sure. The permissions of the individual system groups are not documented very well.