Hi @k_romych ,
According to your description, let me explain your questions.
Firstly, If you want few people to be able to create apps, You can give them the ‘Environment maker role’.
Then for other users, I suggest you can assign ‘Minimum privileges for common task’ to them.
Please refer to the following URL for how to assign minimum permissions.
https://docs.microsoft.com/en-us/power-platform/admin/create-edit-security-role#create-a-security-role-by-copy-role
1\ Download Dataverse minimum privilege security role.

2\ Import it into your new environment’s solution.

3\ Assign roles to users who can only run apps.( https://admin.powerplatform.microsoft.com/environments)
Choose your environment—Settings—Security roles—min priv apps use—Add people
In addition, You can add other permissions to this role as needed.
1\ Choose your environment—Settings—Security roles—min priv apps use—Edit—Save
The highlighted part in the picture is the operation authority of the app.

Secondly, If you don't want users to have this permission("Common Data Service User") in the default environment.
Unfortunately, this does not restrict users from creating apps in the default environment.
Best Regards,
Wearsky