Security in an ERP is often framed as risk reduction. The bigger win is accountability: every action is attributable, so process breaks are traceable.
Permissions as process design
Mapping roles to permissions forces you to define how work should actually flow – and that clarity is worth as much as the control it provides.