Hello Jakob,
The two windows referenced: 'Employee Benefit Maintenance' and 'Employee Deduction Maintenance' are given to users via the following security tasks:
CARD_0501*
CARD_0505*
However, by default, it doesn't seem that, by default, any security roles give users access to either of these two security roles, thus only PowerUsers will have access to these two windows.
What you should be able to do is go into the Security Role Setup window (Administration > Setup > System > Security Roles) and setup a new, custom security role named 'Employee Maintenance' or something along those lines, then you can mark the CARD_0501* and/or CARD_0505* security tasks to this custom role, then after saving changes, assign it to non-PowerUsers in GP that need to access either of these two Employee Maintenance windows.
You could also create a new custom security task to give users access to either or both of these windows, if you don't want users to have all of the access the CARD_0501* or CARD_0505* tasks give users.
Please let us know if you have any questions or this doesn't help resolve the issue for you.
Thanks,
