Did you actually try to simulate the process? If you follow the steps to buy the app using the SharePoint store, you will be asked to provide a credit card number or a paypal account...you can also check (this depends on the app) if it's possible to buy directly from the vendor website. In regards of permissions, SharePoint Admin role should be enough