Glossary: Monitoring Tools and the Identity Life Cycle
Effective permissions
Everything a person can actually do once direct assignments, every group they're in and inherited permissions are combined. Check them when access is unexpectedly allowed or refused.