creating a specific permission

Hi,
I tried many combinaisons with roles but I didn’t manage to do what I want:

I’d like to give the ability to users of a team to create job/workflow templates by their own but not let them modify pre-created templates. In addition, I’d like them to be able to execute only those read-only pre-existing template and not to be able to see other ones.

May someone help

Thanks