Currently, if a user is a given a role with the Administrative privilege:Groups:Reassign ownership, then they can re-assign ownership of any group that is visible to them, regardless of whether they own the group or not. For example, if a group is shared publicly or with the organization, then any other member of the organization can see the group, and has access to the Change owner capability for that group, even if they are not the owner of, or a manager for, the group.
We have over 12,000 users in our organization, and our user-base turns over relatively frequently as an academic institution. This means it does not scale to have users reaching out to administrators each time a group needs its ownership changed when someone is leaving the organization. User need to be able to take care of this themselves.
Therefore, it would be helpful if we could empower users to change ownership of their groups themselves. We do not, however, want the current situation where giving them the existing privilege enables them to change the ownership of any group in the organization that is visible to them
Ideally there would be a non-Administrative privilege that would enable users to be able to reassign a group's ownership only if they are the owner or a manager of the group.
