Concerning the custom roles: Add the ability for someone to save a map but not add items to their My Content folder. We have an organizational account and do not want users to save items such as shapefiles or packages to their account but we want them to be able to save a custom map that they have created. Right now the permissions will not allow someone to just save a map if they are given viewer only permissions.
