This doesn't answer the question. Is there information somewhere showing which permissions are needed for certain activity, such as bill pay or bill approval? Those are not options in the user permissions, and no matter what combination is chosen, neither of those two activities are available to certain users. One user is even set up as a secondary admin.