We need an admin 2 type system role where users can view all courses within the site but disallowing this role to create user accounts (we are tying it to LDAP and don't want manual accounts created). I tried the suggested inspector role where you turn on moodle/course:view and tried setting the users as hidden assignment, but like many others here, I don't like that the editing teacher can see the hidden assignment admins. As a result, I have to leave moodle/site:doanything on, but unfortunately this allows for user creation even though I have moodle/user:create turned to prevent.
Any ideas?