It would be good to have a detailed list of what all of the access permissions grants a user as it is not 100% obvious from the descriptions. This would take the guess work out of setting up users.