It would be awesome to have the possibility to give for a new custom role the create version permission.

For the time being, it's included only on the Administrator role but it covers other undesired permissions for the same user.