1. A system for operating an enterprise computer network including multiple network objects, said system comprising: monitoring and collection functionality for obtaining continuously updated information regarding at least one of access permissions and actual usage of said network objects; and entitlement review by owner functionality operative to present to at least one owner of at least one network object a visually sensible indication of authorization status including at least: a list of users and user groups having access permissions to said at least one network object; and a specific indication of which of said list of users and user groups which were not yet authorized by said at least one owner of said at least one network object.