In the past there was just the "Dynamics 365 Administrator" role, that allowed to administrate Dynamics Sales, Business Central and Power Platform.

Last year the "Dynamics 365 Business Central Administrator" role was introduced to limit admin rights only to Business Central (so no access to Dynamics for Sales or Power Platform Administration).

But there is still no role available to limit the access only to "Dynamics for Sales" or to "Power Platform" (without access to Business Central).

That results in the fact that every CRM or powerapp admin has full access to the ERP system which is not compliant in most cases.

So a separate Admin Role for each product would be needed.