What are your ideas for creating a better Campus Solutions security roles and permissions

I am looking into completely rebuilding our Campus Solutions security.

When we installed Peoplesoft back in the early 2000’s, I created roles based on departments. I than created roles for the director and staff for each department. I have created individual roles with particular menu items that only pertained to that user. This has worked well over the years. The problem that I have run into is that some directors and staff members have transfer to other departments and sometimes these director/staff roles and individual roles have not been updated, as they should have.

I wanted to ask this group for their thoughts and ideas on how they would create better roles/permissions for a college campus environment.