Programatically Add Users to Private Apps

There needs to be a way to add users to private apps beyond the site owner manually adding users to the dashboard. I would like to be able to set an internal app role that allows this privileged user to add, update or delete users from the app. I have created a form with temporary password generation, but it only works if the app is set to public, which is not suitable for confidential enterprise apps