The current feature areas in (our implementation of) NXT are:

• Home

• Constituents

• Gifts

• Communications

• Online Giving

• Portfolio

• Events

• Analysis

• Settings

• Security

The current security roles are:

• Analysis*

• Artificial Intelligence

• Backup Requests

• Communications*

• Events*

• Extensibility

• Fundraising

• Marketing

• Settings*

• Tools

• User Management

• Online Giving*

Fewer than half align in name with the feature areas they supposedly grant permissions to. "Online Giving" is roles for the portal, and not the online giving forms. "Marketing" and "Communications" both seem to grant email permissions. "User Management", "Extensibility", and "Backup Requests" all seem like they should be sub-sets of "Security".

This seems like an easy way to clarify and improve access management.