While there are some nice ways to build and create roles, it would be nice if those roles could be assigned in such away that they only have their role for their division, their department etc. There needs to be more flexibility in how we create roles so that we can give people some access without flinging the doors wide open for them. For instance, being a reviewer of comments but only in your division, or allowing department chairs to see gradebooks, but only for their department. We are having to decide between access or not access based on how wide their reach will spread if they have access to what they need for their one thing.