Create demo user

That can do everything an external user can except contact students.
is a not authorized message better or would it be better to just never show the + signs or the button at all?