Hi,
As an admin, I want to force Users to use automated deployment (ALM Accelerator), it means they can't export canvas app as package then import it into another environment.
I have tried with remove permission Export/Import/Publish Customization in Environment Maker role (Users only have 1 role: Environment Maker)

Bbut it only applied for Dataverse solution, User still could export Canvas app as package (and import it)

The document of Microsoft said that User need role Environment Maker to import Canvas app but do you know which permission exactly they need to be able to import Canvas app?
Regards,
Khoi