Hi,
I had kind of nice idea I think. The idea is, that you can put s2-users on your server into different groups with different rights. So e.g. the superadmin-group which can change everything, an admin-group with just a number of rights, ...