Document the impact / risk of enabling this

[majormoses]

The permissions seem very broad and its not clear why its needed.

Why do we need write access to the code? Why write access to administration? I can understand the rest.

[majormoses]

Seems much more appropriate, I will use the one that does not allow equivalent of rm -Rf / for my org.