We are a heavy Procurement / Spend Program user, and currently our Admin(s) is allowed to edit a PO total after it has been approved without going through a Change Order approval flow. It would be ideal to restrict all users, including Admins, from increasing PO totals without approval (from another Admin, or a custom approval workflow (if role = admin, require X approval).
There are probably other areas in the platform where restricting all users, including Admins, from doing some activities or requiring approvals for some activities would be necessary for compliance reasons