Can I restrict a user to not share to organization?

[AsafEvenPaz]

We have many users which belong to different groups but all belong to our AGOL organization. Sometime, some of the users from one group decide to share items (specifically Survey123 forms) to the whole organization and we need to revert those shares so that those surveys don't show up to users which belong to other groups. Is there a way to restrict the users to share outside of their group? 

[CraigRussell]

Hi Asaf

You can achieve this with a custom role - from Organization > Settings > Member Roles: create a new role, set all of the privileges that you require, and ensure that Share with organization is disabled:

Users who are assigned this role will then be able to share with their groups but not to the organization.

Thanks

Craig