Best Role Permissions to deploy apiproxy with apigeetool?

[#1]

I am trying to deploy an APIProxy using apigee tool and I want to assign a Role for that,

I tried the 'Operations Administrator' but it doesn't work and I get 403.

This Role needs to be able to deploy an API proxy but not change it.

thanks