Hello there, @canninga ...
Our process isn't exactly what you describe. We also use Banner as our SIS (Student Information System). A member of our IT team (who works closely with Banner) works with our team to send over course shells and student/instructor enrollments from Banner to Canvas. When a new semester of courses is coming up, he usually uploads that list a few months (at least) in advance. We also have a "Master Term" where we typically have a "master" course that should be used to copy content from there to a given semester course. In our "master" courses, an instructor is usually assigned with the "Teacher" role. This person is the one responsible for keeping that course "master" up-to-date in Canvas. We also created a custom "Viewer" role (which is based on the "Teacher" role ... with some permissions turned off). We enroll other instructors in "master" courses with the "Viewer" role. They are allowed to view the course content, but they cannot edit those "master" courses. However, they can still import content from the "master" courses to their own semester courses.
What are some of the challenges that you are anticipating with not letting your instructors copy content from a "master"/sandbox course on his/her own? For us, sometimes instead of importing from a "master" course, our instructors choose to import from a previous version of their course instead of the "master". This sometimes leads to course content that is quite different from the "master" because of changes made by the instructor to his/her own copy of the course over time.
I'm not sure if any of this is really helpful or not, but I thought I'd chime in with a quick summary of our process. Hope this helps in some way.
This discussion post is outdated and has been archived. Please use the Community question forums and official documentation for the most current and accurate information.