I have activated the new privacy suite that came in Joomla 3.9 in a website. It is impressive software: its capabilities and the userfriendly way it is presented.
The documentation tells me that superusers can administer information requests from registered users. (They can request to receive an export of all their personal data, or they can ask to delete all known personal data. The superuser admin can create a data dump and sent them this in the mail, or delete all personal data (login data also) which also anonymises their user account data). The only users that are allowed to do this are superusers. It is possible to create an administrator group that has acl rights to create and manage users but without all acl rights a auperuser has. I do not understand why the administrator role is not allowed to handle information requests. I would like to be able to create an admin group with acl rights that permit users in that group to do this.
I assume this has been discussed by developers of the privacy suite, but I cannot find any trace of these discussions, and of the arguments that led to the decision to let only superusers handle this.
Can someone direct me to these discussions, or tell me why it was decided to do it this way? And even perhaps of ways to change this superuser monopoly?