1. A system for operating an enterprise computer network including multiple network objects, said system comprising: monitoring and collection functionality for obtaining continuously updated information regarding at least one of access permissions and actual usage of said network objects; and entitlement review by owner functionality operative; to present to at least one owner of at least one network object a visually sensible indication of authorization status, said visually sensible indication of authorization status including at least a list of users and user groups having access permissions to said at least one network object; to require said at least one owner to review said authorization status; responsive to said review, to allow said at least one owner to modify said authorization status; responsive to said at least one owner not modifying said authorization status, to require said at least one owner to confirm said authorization status; and responsive to said at least one owner modifying said authorization status, to require said at least one owner to confirm said modified authorization status.