Within User permissions we need to be able to lock down access to core programs like lifecycle modeler, scoring, etc. For large enterprise customers, where we have many Marketo users, permissions are based on the ability to create, edit or approve. I can't lock a marketing manager out of these, otherwise they would not be able to perform their jobs in creating programs/campaigns. However, the main configuration of the system should not be touched. I would love to see Marketo engineering come up with a solution here to help mitigate this risk.