You manage a Power BI workspace containing several reports and semantic models. A colleague from the finance team must be able to publish and update the workspace app for distribution, but company policy states they must NOT be able to modify or delete the underlying semantic models or reports. Which workspace role should you assign to this colleague?