Currently the System Administrator role give access to everything within D365, however when you are using HR, and the HR system is populated with sensitive information e.g. Employees Names and addresses, next of kin Names and addresses, banking and NI details and salary information, this leaves those with this access vulnerable. And if you have 3rd parties supporting you with the application, you can have NDA's etc. in place, but nothing is better than not being able to see it initially, not to mention how much trust can you put into people?

Therefore, my request is for Microsoft to generate another System Role that simply removes sensitive HR data from the System Administrator role that can be given to System Admin users, 3rd parties who need a high level of access, so they can still do their job but everyone has the knowledge the sensitive data is only accessed by those in who need to see it.