I agree with trying to be accurate and limit risk. There is always a reality of balancing trust, IT responsive times, administrative diligence, unforeseen gaps and obviously all sources of risk. We can be too lax or we can so refine and control a model, but as that is done, there are all sorts of impediments for both user and admin. There are real costs and advantages over the Privilege Bell curve. I just don’t want to have anyone’s workday consist of constant plate spinning to get the meaningful work done.
Also wanted to say thank you to you mark, Josez and Bryan for this podcast episode