Permissions determine which apps, pages and actions a person can use. People, Legal and Finance have related but distinct access controls.
Review roles in each app
People uses users and roles. Legal uses users and permission groups. Confirm the person's role in the app they are trying to use rather than assuming access is identical across the suite.
Grant Finance deliberately
The documented Finance module has its own access list and section permissions. A broad role in People does not automatically mean access to every financial report.
Check changes and leavers
Review access when responsibilities change and follow the employee offboarding workflow when a person leaves. Use the available audit records to investigate changes. Never share an administrator's credentials with ordinary users.