Make ‘create group with update capabilities’ a non-admin privilege

[Caitlin_Dickinson]

Currently, creating groups with update capabilities is an administrative privilege that can be assigned to a custom role. We’ve enabled our entire university community (6000+ users) to have this privilege in order to facilitate collaborative editing of StoryMaps, Web Apps, Web Maps, etc., which is a common need in class assignments and research projects (see collaboration models for ArcGIS Online). Assigning this privilege to a custom role which we automatically grant to new users relieves us of the administrative burden of creating groups for everyone that would like to collaborate on content. 

There is, however, an unfortunate side effect of this being an administrative privilege. When connecting to the GIS in ArcGIS Notebooks, every user now gets a warning stating they are signed in with an administrator role, and to proceed with caution:

This is misleading and causes confusion, as our users do not have the administrator role assigned to them. Given that users without this ‘create group with update capabilities’ can be members of shared update groups, and edit content therein, I’m not sure what distinguishes this as an administrative privilege. 

I’m proposing that ‘create a group with update capabilities’ be made a non-administrative privilege in order to more easily facilitate collaboration amongst users.

[ColeWhite]

This improvement would help administration of higher ed ArcGIS Online instances and solve the problems that Caitlin's described. I need my org's users to be able to create their own shared update groups (absolutely necessary for educational collaboration), and I also don't want that misleading message displayed to them. Additionally, I can't grant people the ability to create shared update groups as a new user default. As a workaround, I've had to create a scheduled script that updates new users' roles at regular intervals, but it would be much better if this option existed within the platform.