Here is our Use Case:

We train customers and partners on our product.  Some of our large customerx want to manage the enrollment of their employees into their private training sessions in our LMS.  They are not instructors and they are interested only in managing which sessions their users enroll in and they do not want to force them to self-enroll.

I created a Power User Profile with these permissions:

In testing the permissions, I learned that the profile can enroll learners to sessions but can also mark those sessions as complete. According to support, the enrollment permission to enroll a learner to a session cannot be separated from the ability to edit enrollment status which then puts our data integrity at risk if we implement this profile.  Does this seem reasonable?  Shouldn’t those permissions be discrete?  

Does anyone else out there have a similar use and a solution? Hoping for a workaround...