PI System Administrators would benefit from a client or PI SMT extension that supports auditing and modifying user access. This includes mapping Active Directory roles to PI Identities, managing PI Database and Point access, managing AF Database and element access, managing PI Vision access, and managing permissions for folders and displays within PI Vision.
This would be useful for administrators who manage large teams, complex PI Systems, and/or environments where appropriate data access is critical to security policy compliance.
Is the OP asking for a centralized interface to manage security settings? Each of these tools exist, but in varying UIs and locations - mostly because each function can exist without the others (customer can have DA but not vision and not AF) I assume. When you have all 3 it does seem a bit cumbersome to repeat configuration in multiple admin tools.
However, it provides flexibility today where(for example) in Vision you need additional user permission segmentation than in DA - i.e. I don't have to create the same number of PI Identities in each system; only as many as my delineation of rights for that system requires it. I wouldn't want any central tool to necessarily remove that flexibility.