Client requires custom learn job role for learn assignment monitoring/maintenance.

This role should exclude the ability to load content and create courses/offerings/specializations/communities. I've excluded all of the obvious privileges for loading content and creating courses but the job role still shows the create option for specializations and communities. Any idea what privileges control the creation of Specializations and Communities?