Andrea Di Ceglie Eos s.p.a

You need to have %1 or %2 privileges in the user permission set to update the state.', Comment = '%1 = SUPER; %2 = SECURITY'

Trying to setup a user that only can AddUser and assign User Group. In real life scenario the task to add new people to the system is delegated to some HR people. 

The SECURITY group has TOO MUCH permission as PAGE 0 (for instance) and let this employee to do so much more modification to the system.

 I think that this part is bad designed and should be refactored removing the HARDCODED Checks and letting to define users with the effective permission set level to perform only the desired task.

Another limitation that i can't understand is letting users assign PERMISSION SETS that they already own. in the scenario above and HR people should be granted to add people and assign permission based on company organization without being a system administrator

SENT EMAILS and EMAIL OUTBOX are showing only "My emails" it's very common for administrator to go and check for sending problems related to Jobqueues or other users.

You can see all email in a raw view running the underlying tables but is very uncomfortable and limited.

An IDEA would be to have an "Admin SENT EMAILS" + a "My SENT EMAILS"

This setting revert BC to the previous behaviour disabling Modify on every field modification.

This setting is available only for OnPrem Environment

The request is to make this available for Saas too