Here's what I suggest:
OWNER - Only one. The only one that can close the account. Full Access
FINANTIAL - Defined by the OWNER. Are the only ones that can see the money figures by default. Others can, but should be authorized by the OWNER.
ADMINISTRATOR - Defined by the OWNER. The general Projecturf administrator within the organization. Can mess with everything but the money, except if authorized by the Owner.
MANAGERS - The project managers. Can mess with everything from the Project Level down. Not the Global Level. Can delegate tasks assigned to them to them, but the tasks will remain in his list until completed.
STAFF - The final labor force. They can communicate and participate, but cannot change dates or tasks. If something's wrong the can un-commit from a task and a MANAGER or ADMINISTRATOR will have to fix the issue.
COMPANY - The external institution that will pay for the project. No access.
CLIENT - A member of the COMPANY that will pay for the project. A single COMPANY can have multiple CLIENTS. Can create content (Team Management 2.0) add projects, write briefs, add documents, tasks, tickets, dates, but... CLIENT'S requests must always be approved by an ADMINISTRATOR who will check if everything is complete and if deadlines are realistic before assigning the project to a MANAGER.
Adding this to Projecturf will make the system very close to perfect for my company.