We have an option to start configuring a new Security Roles from an existing role. You might be tempted to do that, thinking it’ll save you time and minimize the potential for missing something. But, there’s a problem with that approach.
How to track roles with specific privileges?
Use the Privileges Discovery in XrmToolBox to answer the question of which security roles allow a specific privilege or set of privileges.