I think that your second paragraph about pruning the permissions is interesting; a tool that could analyze and say "Yeah Joe bob has permission to view the accounting info directory, but hasnt used it in 5 months" maybe a process evolved and Joe Bob doesn't need that anymore, or maybe Joe Bob could just partner with someone in accounting and get the semi-annual report run by them. A tool that could find those infrequent uses that could potentially be closed would be interesting. A tool that found frequent uses of something thats supposed to be infrequent (Joe bob just ran 15 reports over three days and is only supposed to run one a month or so) would be equally interesting.
↧