It would be good to be able to separate the activity log permissions from the admin access. Some people should be able to review logs, but still not have full admin access to everything.