Group Membership and Permission Creep Analysis
Find accumulated permissions from role changes.
Added October 15, 2026. Written with AI assistance and checked for clarity and placeholders; not reviewed by a lawyer, accountant, clinician or other professional. How these prompts are made
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
Analyse permission creep. Export of group memberships by user code with the date each was granted and the user's role history: [GROUP_EXPORT]. Roles and expected groups: [EXPECTED_GROUPS]. Compare current groups with the expected set for the current role. Identify users who retain groups from earlier roles, groups with very broad access, empty groups and nested groups that grant unexpected rights. Calculate the average number of groups per user and the highest. Return findings, a cleanup plan in stages that avoids breaking work, a rollback approach and a process for changing groups when someone changes role. Add a worked analysis: 200 users hold 1,400 group memberships, an average of 7 groups per user; the highest is 31. Users with groups from two or more previous roles number 24, which is 12 percent. Propose a cleanup in waves starting with the groups that grant the most sensitive access, a one-week notice to affected users and a rollback plan. Suggest role-based groups so access follows the job.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.