1. A system for managing risk management rules comprising: at least one processor; a rule configuration interface at which a risk management rule is configurable in response to input received at the rule configuration interface wherein the rule configuration interface comprises a list of access rights available for selection; and memory storing instructions that, when executed by the at least one processor, cause the system to identify a first access right as a base access right for the risk management rule based on the input received at the rule configuration interface, identify a second access right as a conflicting access right for the risk management rule based on the input received at the rule configuration interface, and monitor access rights provisioned at a computing system to determine whether a user is provisioned with both the base access right and the conflicting access right.