You are exactly right. And to address the concerns about errors made by the machine, we are not looking in my organization to have the machine automatically make decisions on things like access. It would ideally warn us when we've likely done or are about to do something wrong. An auditing tool at least.