This seems like the kind of system that might be quite useful in extremely large organizations but is total overkill for any organisation that doesn’t have dozens of departments, locations in different countries,…

In general, the flawed access control systems I have seen in the past have almost always been too convoluted and complicated compared to what a few years of use showed would have been actually needed.