Need detailed information about each role and individual privileges

Summary:

During implementation, especially during SIT and UAT, clients are asking about segregating roles/access for various purposes. It is becoming more and more difficult and challenging to meet client's requirement related to ERP access. I am looking for a good documentation which will help me to understand each roles, privilege. Need a table which will inform which privilege can provide specific functionality. For e.g. specific privilege will allow create invoices and which other privilege will allow create accounting.

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Current version (or slightly older) document will be very helpful.