This definitely needs to be updated! Admins should also be alerted when new access options are added, so that they can be modified for users.

I'd love to also see little help icons or info icons that when clicked will explain what each permission set does. Especially as many features are moving from database to NXT, those of us who manage access need a better way to ensure we're granting proper access based on the principle of least privilege.

This is so critical. The security settings in webview alone are not good enough, nor are they clear. Some users may need rights to delete very specific types of data, but that is not allowed. What does it mean to "manage unassigned prospects?" Does that mean you can edit or delete any data if they are unassigned, or does it just mean you can assign them to a fundraiser? This is the thing that makes me the most anxious about webview.

I'm having a difficult time discerning what Roles to assign. For instance, in database view, I have users who can modify an Appeal description, but were not able to in NXT. It took me over an hour to figure it out (that was yesterday, and I couldn't figure out how I came up with the answer that it's in Fundraising Role). The Roles are confusing and vague.

If someone has "view" only rights should be just that "view only" and not have other rights. Also, if someone has rights to view lists, they should be able to view the list regardless of how it was created.
There a lot of rights that are connected to each other when they really shouldn't be (same is true in database view).