Solution:
As of March 2024, this seems to be possible in Zammad. Prior to March 2024, the wording in the interface was confusing, as explained in this GitHub issue: https://github.com/zammad/zammad/issues/4957
The wording to be used for KB role permissions are ‘Knowledge Base Editor’ and ‘Knowledge Base Reader’ which clarifies this.