Symitar Privileges Set-Up

We are currently in the process of reevaluating our Symitar Privilege groups and I would appreciate any insight that anyone has that has gone through this. I know I have worked some with Doug from Baxter, but as I get deeper into this project I'm learning more of what Symitar can actually do.  Therefore, I'd appreciate any positive or negative situations that you encountered.  If you could go back and change your approach, what would you change? Thanks in advance!  (If you feel more comfortable emailing, [email protected])