Single-form administrator and gift notifications

For GiveCampus accounts and administrator access.

Treat access and notifications separately. Assign only the intended giving form/group and avoid all-form access, but inspect every role’s permissions: Reporting Admin includes school-wide donation reports, so object selection alone does not confirm strict isolation. For notifications use the form’s additional gift notification recipients rather than the administrator’s school-wide donation email subscription. The recipient logic is gift notification delivery, not a credit-card-only filter. If strict single-form read-only and card-only notifications are required, have support verify a permissible role configuration instead of promising this combination.