Apply role-based account creation controls to template uploads

General Users are not permitted to create accounts through the Envizi UI. However, when a General User uploads capture data using a template, a new account can be created automatically if the account referenced in the template does not already exist.

This creates an inconsistency between the permissions enforced in the UI and the behavior of template-based data uploads. In our testing, the newly created account was assigned to a Location and appeared to be available for normal use, rather than being clearly isolated as an unallocated account awaiting administrator review.

This behavior may allow users without account creation privileges to create accounts unintentionally, for example through a typo or an incorrect account name in an uploaded template.

We would like Envizi to provide one or more of the following controls:

- Apply the same role-based account creation restrictions to template uploads as to the UI.
- Allow administrators to configure whether General Users may create accounts through templates.
- Reject records that reference non-existing accounts and return a clear validation error.
- Require newly created accounts to remain in an unallocated or pending state until reviewed and approved by a System Administrator.
- Clearly identify accounts that were created automatically through a template upload.

This enhancement would improve permission consistency, data governance, and protection against accidental account creation.