File share hierarchy and its ACL can be complex owing to uncontrolled granting of access permission to users and user groups, ex-employees’ files, lots of files generated periodically by applications, and so on.
In order to remove excess permission to access files, it is necessary to review with business users the existing access control in order to confirm its accuracy and to identify data owner. A complex file share hierarchy often presents too much information (a few hundred thousand lines is normal) for a thorough review to be possible. ITC adopts a fix-by-level approach to remove this obstacle from the review process.
Using Varonis, we generate a whole file share tree report of ACL of each file and folder, their history of access, and the most possible data owner. Such information will then be grouped by each level of the file-share tree and reviewed by the business users level by level, starting at the top level. The design, data owner, proper permission, and its inheritance of folders at each level will be determined and then fixed. The same process will be repeated at the next level and up to a level where permission of all lower level folders can be inherited.
