Restrict "group management" to Promasters. I have had instances of users creating groups and it is making our folder structure wonky
We have it set so the "users" are the ones still in training, and only have access to the training folder. Once they produce a few maps, we update their settings to "business analyst" so they can create maps anywhere in the system. We don't want them creating folders/groups though.