Are you working with already written software? If not, you have lots of options to avoid sending your accounting people to a bunch of different subsites to do their work. Otherwise you might have to go page by page through the app and figure out what to do, then replicate this on each subsite. But don't add any privileges, they don't help much.
