It is maddeningly difficult to give employees the appropriate level of access to system features. For example, I need to give my financial aid director access to People Finder in Academics, and after half an hour of trial and error (including giving him every role that another employee who has that access has), and he still can't see it--my guess is interference was some additional roles that he has. I know security is twitchy but this difficulty in giving employees access to what they need (without giving them far too much) is an ongoing source of frustration.