Our Finance Executive with invoice generation role does not need to access the configuration screen. The configuration usually will be done by IT so it will be beneficial for access control purpose to segregate these functions and can be assigned as needed to each user.