In ArcGIS Online, split the Update privilege under the Administrator Privileges in the custom roles into two privileges: 1. Allows members to update and categorize content owned by all organization members (for instance to change symbology in a web map and than save the web map under the same name and with the same owner (i.e. use Save instead of Save As)). 2. Allows members to edit data in all hosted feature layers and hosted feature layer views, even when editing is not enabled on those layers.
That way you can make it so that other administrators can change symbology or visibility of layers within a web map, but cannot make changes to the data layers where editing is not allowed.
reference:
https://doc.arcgis.com/en/arcgis-online/administer/privileges-for-roles-orgs.htm#ESRI_SECTION1_41D91...
"Update
Allows members to update and categorize content owned by all organization members, and allows members to edit data in all hosted feature layers and hosted feature layer views, even when editing is not enabled on those layers."
Or option 2:
Add the ability in ArcGIS Online to disable changes to the data for layers where editing is not allowed, even for the owner of the data.
Gr. Daniël
