let admins enforce share settings, bot settings, etc org wide