Currently, for using Power Platform with Microsoft Teams require to enable Power Apps and/or Power Automate apps (Microsoft Teams apps) for Teams users, but by doing that, users have access to create and use Dataverse for Teams environments.
Also, if users have Power Apps app assigned, they can create, edit, delete canvas apps.
It should be create to have the maker experience and the end user (play user) experiences separated, with that, these scenarios could be possible:
A canvas app can be used in a tab within a group without granting users access to Dataverse for Teams features (using Power Apps and Microsoft Teams without using Dataverse for Teams)
Group owners can create/edit apps while members can just use the apps (Dataverse for Teams). Or a subset of users can be apointed as makers.