In the production environment, work gets 'locked' on a user preventing customer order fulfillment. Currently, the ability to 'unlock/cancel' locked work is restricted to the system admin role. We would simply like the ability to allow for an extension role to allow non-sys admin users we specify to perform this role of canceling locked work.

In other words, we do not believe this specific function should be locked at the MSFT level, but rather should be able to be overwritten by security extension roles managed by the D365 owning company.