We're in a situation I hope someone else has solved.
We have our principals and guidance counselors set up as subaccount admins (7 buildings) so they can do student lookups, etc. We also run all-staff training through manually-created Canvas courses at the root account. What we're seeing is that when a subaccount admin is added as a student to root course, those admin permissions are following and they cannot participate as a student.
Is there a way to either:
Limit admin permissions to courses within the subaccount and revert when they're enrolled as students?
Set up a new role that limits admin permissions when they're enrolled as a student?