Teachers have access not only to create any products but also to access all contacts, marketing and emails as well as all the digital and physical products, communities etc.

This seem way too broad.

I think it would be better to limit access to the courses they have been assigned to and be able to create new courses.

Access to any digital products, communities etc, that they have been assigned to.

Remove access to the the marketing menu. In my business I would not be getting teachers to do marketing and there is also the added concern that they do have access to download contacts.

Create a new type of user MARKETING that only has access to the marketing menu, galleries and video data. (Might need to think that one through a bit more eg. they may need access to digital downloads etc too.)