We need the ability to create custom privileges/edit existing so that we are better able to control access to be able to update things like tags, systems, roles, etc. Ideally:
User: view only
Business Analyst: edit processes, no access to change any Admin level items
Process Admin: all above, change admin level, publish
Promaster: all above and configuration