Security is always something that you have to plan well into your implementation cycle. While there are a lot of standard roles our of the box with Dynamics AX. Organization and work structure varies company to company and so you will need to review the roles to suit your needs. One thing you might need to look at is the field level access. This video gives a quick walk through of modifying a role to override field level access.