Identify users who have been granted sensitive access privileges and data to report, certify, or remove.