Current user flow (K-12): Student signs into product like AutoCAD with SSO. Just-in-time provisioning creates the user automatically in our Autodesk Team. Student has no access to products, and the Teacher must ask the helpdesk to add the student to a group within the Autodesk team in order to access products.
Rather than the helpdesk assigning users to groups manually, I would like to be able to create an automatic group assignment rule, so that new SSO users are added automatically to the group within the Autodesk Team. A quota would prevent misuse.
If that's not possible, then a new admin user role with permissions to add users to groups, but not change roles. This would allow us to delegate group additions to teachers. Currently the secondary admin role has too many permissions for us to delegate to teachers.
Thanks!