[navinninan]

Please can you advice me on the below?

In multinational companies , how do you track which users has permissions to which area? Is there a tool being used for this OR is it being tracked using some internal developed systems.

For e.g :- Can you advice from a SOX compliance perspective OR from an ISMS perspective how do we track the list of permissions available for an individual in an IT Firm, whether it be a technical analyst / server engineer , software developer OR call centre analyst?