You can grant permissions to a user to only Update the content of your app.
When setting up a user who can only edit cloud collections, you need to give that user the following permissions:
Data: Edit data (without import) in cloud collections
Data: View cloud collections
Data: View a data source definition
When appropriate: View HTML5 Preview
The setting in the environment should look like this: