Methods and systems for optimizing grouping for enhanced access control and risk mitigation in an enterprise

A server system, the system comprising:

• a memory configured to store instructions;
• and
• a processor in communication with the memory, the processor configured to execute the instructions stored in the memory and thereby cause the server system to perform at least in part to:
• obtain user data comprising data associated with a plurality of users and a plurality of groups, wherein each of the plurality of users is associated with at least one group of the plurality of groups, wherein the user data specifies a group membership of each of the plurality of users and one or more of the plurality of groups;
• obtain access data comprising data associated with a plurality of data objects and corresponding access information, wherein the access information specifies a set of users or groups, from the plurality of users or the plurality of groups respectively, authorized to access each respective data object of the plurality of data objects;
• determine a first mapping information between each of the plurality of groups with corresponding users of the plurality of users based on the user data;
• determine a second mapping information between each of the plurality of data objects with corresponding users of the plurality of users based on the access data;
• generate a cluster dataset representing a plurality of clusters based at least on processing of a relational structure between the first mapping information and the second mapping information, the plurality of clusters representing newly generated groups of the plurality of users, wherein each user in the plurality of clusters has a same access authorization for the plurality of data objects as assigned within the plurality of groups, wherein a number of the plurality of clusters is less than a number of the plurality of groups;
• and
• replace an existing grouping of the plurality of users with the generated cluster dataset.