Permissions for group admin lites need to be changed

It has come to our attention that group admin lites have the ability to complete workflow steps that they are not assigned collaborators for. This is an issue as our clients are completing the 'confirm calculation' step before the payroll reports are ready to review. Apparently this has always been the case but we have only noticed clients doing this in the last couple of months.

We have been advised that group admins do not have this ability, however, we were advised that the lite option was best to use as this gives clients limited permissions to change things on the payroll.

There also needs to be clear information on what each role can do, specifically the differences between admins and admin lites and why this differs between company and group level.