Given security and 2FA are a hot topic at the moment I wonder if you would consider adding a security level. We currently have to have purchasing and ecom team members with Administrator access level so that they can import item data from a spreadsheet. This is neither good for security in terms of external threat (by more people at risk of being targeted) or for internal problems as these users could accidentally (or in its worse case, intentionally) tamper/edit top level configuration settings.
It feels like there ought to be a stage between Backoffice and Administrator. For instance "Full Backoffice" that has access to everything bar the "Setup" tab functions.