1. A method comprising: reporting accessibility of a plurality of users via a portal to a plurality of client data objects stored in tangible memory, wherein the plurality of client data objects are grouped as a client data set, including: identifying one or more group-based or role-based system permissions that give at least some of the users access to the client data objects in the client data set; identifying one or more sharing rules that give at least some of the users access to the client data objects in the client data set; and for at least a subset of the client data objects in the client data set, generating data to notify a client of both the system permissions and the sharing rules that give the users access via the portal to the subset of the client data objects.