Improve mapping of AD roles to security levels/user source roles. There is no clean way to map Active Directory groups (which are often long and complex due to being unique within a whole org) to Security Levels or even just simpler names in the AD user source. The ability to strip off a prefix from the AD group before it becomes a role in the user source, or map specific roles in a user source to security levels (including the built in Administrator SL) would prevent a lot of hacky work arounds.