It is really difficult to create security without knowing what controls an area. For example, if I wanted to give a SME the ability to control an area without making them a Platform Manager, it takes a lot of work to figure out what permissions they need.