The quality of an authorization concept is always highest right after the go-live, when the fundamental principles of the concept are still evident and any initial difficulties have been resolved. But no matter how close to the aforementioned ideal a concept is at the beginning, it will invariably and steadily deviate from it over the course of time. This may be due to changes made to processes or the organization that are not integrated properly into the concept, or to exceptional situations in which authorizations are extended – contrary to the concept – and then not revoked when they are no longer needed. As a result, many authorization concepts in the field no longer meet the requirements of minimizing the number of authorizations to reduce risks and allowing for easy maintenance. Once this point is reached, it is often best to redesign the entire authorization concept. That is the purpose of the consolut Authorization Redesign package.