What is really needed is something similar to a RSOP (Resultant Set of Policies) report, but of all security in Epicor. Even if is was just a tab on the User account security form on a per user basis (Dashboard with a retrieve button) for menus would be a great start. I’ve had varying success with copying menu security and user groups over using DMT lately, which makes thing even hared when you are trying to get a new system up. So a tool like that would help.
Here’s some more information.