This is not "certain roles can create issues", it is "certain roles are the only ones able to create certain issue types"
Jira does not do that natively, the create-issue permission is done at project level, not issue type.
You could do it in Behaviours in Scriptrunner, but that would only affect the web-UI and isn't too hard to bypass (and doesn't catch all the ways you might now create an issue)
You can rig it up with a kludge - you'll need one of the clever workflow apps, or a scripting app to create a validator on the "create issue" transition that does "look at role and issue type and reject validation if they don't match". It's ugly for your users, but it'll work.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.