1. A method, comprising: identifying, by a system comprising one or more computer nodes, a plurality of running software components on a cluster of one or more computers, a first subset of the plurality of components managing one or more datasets stored in the cluster, a second subset of the plurality of components managing other components in the plurality of components; identifying, by the system, a plurality of entity pairs from the plurality of components and the one or more datasets, each entity pair being either: (1) (i) a component paired with (ii) a dataset, or (2) two components paired with each other; determining, by the system, for each entity pair, a respective directed relationship from a first entity in the entity pair to a second entity in the entity pair, wherein the first entity is a component, and wherein the directed relationship represents the first entity executing a type of interaction with the second entity; identifying, by the system, one or more security policies affecting each respective entity, wherein each security policy limits user access to a respective type of interaction by another entity with the respective entity; analyzing, by the system, for each entity, entity pairs including the entity and one or more security policies affecting the entity to identify inconsistent security policies from the one or more security policies, wherein the inconsistent security policies are policies that allow different scopes of user access to the respective types of interaction; and generating, by the system, a recommendation of changes for the inconsistent security policies that cause the one or more security policies to allow identical scopes of user access to the respective types of interaction.