Course with an additional role that can only assign or remove members crs read visible manage_members