Payroll - Permission options when granting a user access to manage payroll

When granting a user access to manage payroll, there are several options that should be considered.

Manage payroll - access to all payroll-related functions for his/her department(s).
Create payroll only - the manager can only create a payroll for his/her department(s), but can't edit the parameters of the payroll files.
View overrides only - manager can view overrides but not enter any overrides him/herself.
Full access except add/edit Payroll - manager can do anything in payroll (for his/her department(s)) except for editing parameters or adding a new payroll.