Besides the association between the user and the role you may now control which setup sections the user allowed to access.
We have replaced Administrator flag with the choice of predefined setup permissions.
- No Access
The user is not allowed to access setup section at all;
- Manage Users
The user is allowed to invite new users and edit existing users;
- Manage Data
The user is allowed to import, export and delete data from the tables;
- Manage Users and Data
Combines "Manage Users" and "Manage Data" privileges;
- Full Access
User can access setup with no restrictions.
Eventually we are planning to allow permission set customization to enable fine-grained setup access control based on the profiles.