While assigning specific access rights or permissions to users whose access to various organization systems or resources are controlled via directory or identity management tools