Hey did you manage to solve this? I am having the same issue.
1) I can only see roles of the Parent BU.
2) I created a custom new role for the child BU, and I can actually see it to assign it to the app in 'Manage Roles', but still the user cannot see the application.
3) In roles, I did check the Read privilege of 'Model-driven App'