Nathan Schmidt, Principal Security Architect, explains what ‘excessive permissions’ means, and how ‘effective permissions’ means something entirely different. Excessive permissions look to the past to understand what identities are doing, whereas effective permissions look towards the future to understand what identities CAN do.