Worker apps have no roles by default. After the application is created, you can add or remove roles as needed, up to the level of your roles as a user. That is, you cannot assign roles that you do not have.
Note:
If you create a Worker app through the PingOne API, the app will inherit your roles by default. Use the assignActorRoles parameter to create a Worker app with minimal roles. For more information, see Create Application - OIDC - Worker App in the PingOne Platform API Reference.