It may be too difficult to maintain fine grained permissions for each bespoke professional role, but it seems the investment could be worthwhile for large homogenous groups. Example: CSRs only need access to accounts relating to assigned, active cases.