Thank you so much for granularity around LTIs! This will finally allow us to let teachers remove old LTI configs from imported courses without giving them the ability to configure new ones or edit others (both of which could end up causing conflicts with university policies around vendor privacy and data protection rules).
I have a related request that I've had a support ticket on for a while now... Since you're working on these permissions, could you "pretty please with pandas on top" tie in the "manage whitelist" button for admins into one of these new permissions (likely the edit one)? Right now, anyone with even limited admin access can go in and remove the whitelist token, exposing all apps to our teachers. We had this happen last summer, and it really caused a mess, with no way to track who did it.
-Chris
