It would be great if the the ability to add global resources was separated out from the "Modify" Role.
This would allow department level admins to add global resources for their department but not modify resources outside their department.
