Can an iOS "Developer" Role create/upload Testflight builds?

I've outsourced the development for one project and I gave them the "Developer Role" and "Access to Certificates, Identifiers, & Profiles."

They're working on a test build and getting ready for a distributable version to show me, but they are insisting on me granting them Admin priviledges which I refuse.

After a lot of angry arguing back and forth they continue to insist on admin rights claiming they can't proceed without it.

So far, I've created a development profile and the App ID on the store.

I'm trying my best to understand the documentation and all the different provisioning profiles and certificates, the only bottleneck that I can see is that maybe they need a distribution profile.

However, the only way to create a distribution profile is to upload a CSR file which they recommend being done through Xcode directly. They insist that they don't have access.

Where is the gap in communication there and what are the steps we're missing for them to be able to ad-hoc or testflight distribute?

I absolutely refuse to grant Admin rights and cannot believe Apple hasn't already accounted for contract workers to make User Roles friendly enough to accommodate a situation like this.

My understanding from the documentation is that once they were granted "Access to Certificates, Identifiers & Profiles" they should be able to do everything they need

from Can an iOS "Developer" Role create/upload Testflight builds?