Permissions attach to roles, not people. Four of them are worth restricting from day one because each is a way for money to move without a second pair of eyes.
- Approving a credit note.
- Overriding a price or a discount limit.
- Matching a payment by hand.
- Posting into a closed period.