XMLP Roles

Hello:

We are upgrading from Peoplesoft FSCM 8.9 to 9.1 and the users are interested in using XMLP more.  My team does the security administration and have some concerns with the delivered roles.  My questions are:

1) should non technical users only get the power user role?

2) does the power user role give them too much?

3) should the XMLP roles be used at all in production?  We feel all developing should be done in test DBs and if access is needed for prod we have a MR DB that is a copy of prod each week they could use that to support prod issues.