Can the Service Administrator role do anything within EDM?

Summary:

We have multiple people assigned as Service Administrators. We have Approvals and Approval Policies also set. Do the SA have to be in those groups in order to make any changes? Or should they be able to bypass them?

Content (required):

We have multiple people assigned as Service Administrators. We have Approvals and Approval Policies also set for User and Approver groups. Do the SA have to be in those groups in order to make any changes? Or should they be able to bypass them? For example, in the Activity Segment (Entity), the admin tried to make a change, but received an error message they could make any changes within the Organization. The documentation isn't that clear.