The ability to distinguish what privileges are given to an employee within each category need to be more detailled like they were in the older versions.
You may want to give someone access to sales to do invoicing only, but not want them to view any reports or be able to create credit notes.
You may want to give limited access in banking, eg spend and receive money transactions or prepare bank deposit but keep them out of reconciliations.
At the moment the user choice is all or nothing.
'Users - Security Settings, Access and Privileges"