Best practice is to give users "least privilege" permissions. Just what they need to do their jobs and no more. This can be extremely difficult to ensure with multiple servers, multiple file shares, multiple folders and files and multiple levels of all of the above. In addition users belong to different groups and organization units.
A tool like this can be invaluable to ensure proper rights are given. Users will always let you know if they don't have access to something that they need, but seldom to never tell you that they can see "stuff" that they shouldn't be able to.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.