Keeping documentation up to date is very difficult for Security Roles.

Would it be a lighter ask to simply use a naming convention for the Marketing Security Roles and Descriptions within the system?

For example:

Mkt: Admin - Gives user access to create, update, and delete any Marketing asset regardless of owner.

Mkt: Base - Required for any user to access the Marketing application in D365

Mkt: SYS Lead Gen User....

Mkt: RT Library -

Mkt: OB Forms -

nothing = applicable to both RT & OB.

SYS = System User, not applicable to End User,

RT = Real Time specific, not applicable to outbound;

OB - Outbound specific, not applicable to Realtime,