I have a Field Maps deployment question, but this is more of a AGO Map Viewer focus. I have a web map with several layers and forms built for those layers for use in Field Maps app on a mobile device. The users have edit ability on the layers once they're in the FM app so that they can fill out the forms.
The issue here is that if they log in to AGO and go to the map, they also have edit control over the actual map and access to the FM smart forms. How do I prevent any unauthorized map changes to symbology, FM forms, layer adds/removals, etc in the map itself?
I tried adding the map to a group, but didn't see any edit controls there. I can't make the map private to restrict access to only me because that would then prevent users seeing the map on the FM app. I feel like this is a valid concern and that I'm missing something obvious here.