Roles and access discussion between DBA/IT and Controller

Hello, I am working with our controller to hone permissions for our AP&AR clerk and Purchasing Coordinator. I speak blackbaud, she speaks accounting/finance. Do you have any suggestions for how to make sure each employee gets the access they need? Or for where there is nuance, the best way to find and set up the specific permissions? I believe we still have some security access in Database view; at this point would it be a better idea to just do it through FE NXT? I appreciate your thoughts!