1. A method of operating a computer system, the method comprising: installing a plurality of application software programs in said computer system; defining user access assignments for each of said application software programs for a respective plurality of users; storing, in a user access repository, data which represents all of said user access assignments; defining a user access rule; and analyzing said data in said user access repository to determine whether said user access rule is violated by said user access assignments.