Requirements and discovery
We document the current process, important exceptions and the decisions a user needs to make. Roles and permissions are treated as part of the requirement. Discovery should distinguish a genuine system need from a process issue that could be solved more simply.

