Hello,
We recently noticed that the create / update contact or create / update company role option was sufficient to perform .csv import for contact or companies. This means that agents who can perform updates on individual client profiles can also perform bulk updates through .csv import.
From a security point of view, we think that the privilege to perform individual client update and the privilege to update client or companies by .csv import should be granted by distinct role options.
