We currently have all our IT staff listed as company admins to handle company rules, developer options, company tags, etc. However, I don't want to give them access for other resources like billing, financial info or company preferences.
We need granular permissions for company resources to have the ability to delegate without handing over full company admin permissions.
Another use case: Company Admin also gives access to all the companies workspaces and inboxes. We limit the access for sensitive data. I may need to update rules/tags/custom data points, but I don't need to be able to see the emails.