How to limit access to manage/create contacts by type via user roles?

Question

Have a small franchise type non-profit organization in which multiple level users within the org need access to tools within civi, however, we do not want base level users that are managing their individual school sites to be able to add higher up organizational type contacts (like other school or club locations or regional type centers). We just want them to work on their individual members only, and to limit the availability of specific management/access of contact types based on their specific roles. We are using the Relationship extension to manage permissions on their own members down the chain of command, but we need to cutoff the chain of possible contact types they have access to and also hide those possibilities in the nav menu. Any help is much appreciated!!! *using civi 5.2.2 and drupal 7

Answer 1

This may not be the answer you hope for, but the way we have approached this for other multi-level sites is to keep the 'lower level' users completely out of civicrm and give them everything they need via Views and Webforms.

Answer 2

We have done this by creating groups in OG, synching them and adding ACL's for each group. This way, they are able to view and edit their own contacts. Furthermore, we created some super-roles which are allowed to view and/or edit all. Doing so we are even able to have one contact which may be a member of two groups.