The ability to segregate specific administrator roles, to put system controls in place. Example - Creating an administrator roll who can only create new users, but not have access to clients or workflow, or gain access to give themselves other administrative rolls.