Investigate the System Console and Pages to determine -
any pages that may need multiple permissions for a page.
This could be either, there is a setting on a page, that should be reserved for System Admin but rest of the page would be available to another type of admin. This could also be that a page does multiple things requiring multiple permissions.
Our current system console architecture may easily support this within the form.
Understand which configuration settings each form updates and would need access to.