Add per-role cap for external collaborator invitations at the enterprise and group level
Proposed solution
Add a Maximum External Collaboration Role setting in Admin Console > Enterprise Settings > Content & Sharing that:
-Caps the highest role a managed user can grant to external collaborators(or internal as well).
-Removes higher roles from the invite dropdown so the limit is visible at the point of action.
-Applies globally with optional overrides per group, per user, and per folder (respecting "most restrictive wins").
Why it matters
This separates "can invite" from "what they can grant", a standard pattern in enterprise content platforms and a common ask from security and compliance teams. Letting admins enable broad self-service external collaboration without the risk of over-permissioning.
This would significantly reduce our administrative overhead by letting us define sharing policies up front, so end users can collaborate externally on their own without waiting on helpdesk tickets to provision access.
Anonymous
shared this idea