I would expect students and teachers to have none privileges, and the teachers in need of privileges to be added to a admin or jradmin group.
in my experience is that the best way Best wishes, Roland