1. A computer-implemented method for classifying a data access authority of users of a computer system, comprising: identifying an unclassified user in a hierarchical tree structure containing a plurality of users, wherein the plurality of users contains classified users and at least one unclassified user, wherein each of the classified users is classified into at least one of a predefined set of categories, and wherein the hierarchical tree structure relates users in the plurality of users to each other according to an organizational structure of an organizational entity; selecting one or more classified users from a subtree within the hierarchical tree structure, the subtree including less than all of the hierarchical tree structure and containing at least the unclassified user and the selected one or more classified users, wherein the one or more classified users are selected according to a relationship with the unclassified user defined by the hierarchical tree structure; comparing the selected one or more classified users to the unclassified user to determine similarities between the one or more classified users and the unclassified user; and generating, by operation of one or more computer processors, one or more suggested categories from the predefined set of categories for classifying the unclassified user, wherein the one or more suggested categories are generated based on the comparison between the one or more classified users and the unclassified user.