For example our Sales site collection https://lms365.sharepoint.com has subsites for each Partner.
Each subsite has different owners (i.e. partner accounts).
After partner creates a course in course catalog of his subsite, he needs to Trust added in course Apps.
But this can do only Site collection admin!
And this should be done for each new course in course catalog of subsite.
But it is not the end of the story.
Site collection admin goes to partner’s course to Trust apps, but he cannot, because he is not Course administrator!
So Site collection admin needs to add himself as a Course administrator.
And only after this long journey Site collection admin can trust the Apps!