Hi Zeeshan,
How about instead trying assigning the user to the default role of manager in the category. If you find that the user can do too much, you can always customise the manager role and remove some capabilities. However, removing a few capabilities from a default role is easier than trying to create a custom role from nothing.