I'd like there to be more control over admin privileges and to be able to allocate a group privileges.

This would require a finer privilege set than there is at the moment, and the ability for admins to select who gets what privileges.

To start with, if we could pick which items in Admin Console users of a particular group can see (ie. Active Sessions, Assets, Admin, Cache, ... , Users, Workflows, etc) this would be great.

Ideally though, we'd want some finer control over each of those items too.  For example - Users might be broken down into three privilege sets - List Users, Add/Update Users, Become User, and Delete Users. 

While Groups might be broken down into even more - List Groups, Add/Remove users from Group, Add/Remove Groups from Group, Add New/Update, Delete

The privileges above would be set based on group - so anyone in that group could perform the actions from those admin elements.  Thus I could create a User Manager Group - with members given the ability to manage user accounts. 

This would give us admins the ability to delegate day-to-day admin tasks (such as creating new user accounts, changing users passwords, adding users to groups they should be in but aren't, etc) without having to give the people managing those tasks full Admin privileges (and thereby the ability to affect the whole site).

-
If my comment is useful, rate me - I can always use the karma! :)
Join us on the #webgui irc channel on freenode! (I use the nick Radix)