Site access rights to an IT system and data access rights to stored information and IT applications may only be granted in the scope required to perform the corresponding tasks. This also applies to authorisations assigned to users and groups administered by a directory service. If these rights are administered incorrectly, operations can be disrupted if required rights have not been assigned. On the other hand, the granting of rights that exceed those necessary can result in vulnerabilities. If access rights are assigned incorrectly or inconsistently in a directory service, the security of the overall system will be significantly threatened as a result. Administrative rights also are a very critical aspect. Assigning such rights incorrectly could put the entire administration concept in question at risk and, under certain circumstances, even result in the directory system administration becoming blocked.