A user with the stakeholder role can do much more than is allowed according to the permissions.
For example, they can create new user stories in the backlog, change existing statuses, and so on.
I also tried to create a completely new role that could only create issues. But users who only had this role could also create and edit stories, among other things.