In version CE and EE Gitlab, we have the ability to allow users to create protected tags. We can do this by access levels (maintainer, developer) but in UI of EE version, we can provide this ability for a particular user, although the API does not have this capability, even in the EE version.