I'm going through this right now — people trying to use super-fine permissions (dozens of points!).
Besides role-based groupings, there's no chance this fixes more issues than it causes in my case (less technical managers and workers using an SaaS).
Any ideas and insight appreciated!