We expect gitlab group admins to be able to create drone organisation secrets, but it looks like only drone admins can.
The system administrator role is required to create, update or delete organization secrets. This behavior is described at docs.drone.io/secret/organization.
I am aware of the system administrator role, however this gives a user access to more permissions than they require and is not secure. Is there any future plans to allow for more granular permissions when it comes to users being able to self-service Drone organisation secrets?