There should be a way that an Admin can go into a testing environment to see what each user with different roles can see and access. So often I find myself having to guess what exactly a User will see and have access to since one little change to a role can affect a lot.
I am always testing what user can see for various roles/permissions. There is no easy way to do this. There is not enough documentation for what role/permission really does what. And the roles are not exactly correct - a person who has "view rights" to something should NOT be able to export that data - that is more than "viewing" the data. When new features are added to they system, I am always having to check what permissions need to be set up for a user to be able to access the new feature. It would be nice if there was a simpler way to really test what permissions do what and that this was also documented.