A computerized method comprising: by a computing device having one or more computer processors and a non-transitory computer readable storage device storing software instruction for execution by the one or more computer processors, obtaining information describing network traffic between a plurality of network devices; determining, based on the information describing network traffic, a network topology of the network, wherein the network topology comprises a plurality of nodes each connected by an edge to one or more of the plurality of nodes, and wherein each node is associated with one or more network devices and each edge represents a communication path; accessing user account access information indicating user account access rights to specific network devices; associating, from the user account access information, identifications of user accounts permitted to access network devices with respective nodes associated with the network devices; and generating user interface data comprising a graph identifying the network topology, characterized in that for a particular user, the user account access information indicating user account access rights to specific network devices comprises: information indicating that the particular user is permitted access to a space which contains at least one network device associated with the particular node, and information indicating that the user account associated with the particular user has actually accessed at least one network device associated with the particular node within a defined time period. by a computing device having one or more computer processors and a non-transitory computer readable storage device storing software instruction for execution by the one or more computer processors, obtaining information describing network traffic between a plurality of network devices; determining, based on the information describing network traffic, a network topology of the network, wherein the network topology comprises a plurality of nodes each connected by an edge to one or more of the plurality of nodes, and wherein each node is associated with one or more network devices and each edge represents a communication path; accessing user account access information indicating user account access rights to specific network devices; associating, from the user account access information, identifications of user accounts permitted to access network devices with respective nodes associated with the network devices; and generating user interface data comprising a graph identifying the network topology, characterized in that for a particular user, the user account access information indicating user account access rights to specific network devices comprises: information indicating that the particular user is permitted access to a space which contains at least one network device associated with the particular node, and information indicating that the user account associated with the particular user has actually accessed at least one network device associated with the particular node within a defined time period. information indicating that the particular user is permitted access to a space which contains at least one network device associated with the particular node, and information indicating that the user account associated with the particular user has actually accessed at least one network device associated with the particular node within a defined time period.