Wanted to second this request, not great that users can just do this without the people administrating the system being able to control it.

@Louis_Frolio regarding your third suggestion:

> Limit app creation and management to trusted users or admin groups.

How and where can one do this?

> Remove CAN USE, CAN MANAGE, or IS OWNER permissions from general users and assign only to admins or service principals.

To which resource should this apply? There are no Apps listed in the ACL documentation https://docs.databricks.com/aws/en/security/auth/access-control/

Thanks