Using information in EPC Models to control access rights to other systems

Dear Community,

  I wonder if anybody has ever extracted information contained in EPC models to control access rights to specific programs and modules.   I was thinking that in EPC models containing objects like ‘Application System Types’ and ‘Screens’ one can use the information to control access rights to the corresponding system and screen.   Concretely for the model below, here is what could be done.         Connection type 1 & 2 are of ‘Carries out’ type while connection types 3 & 4 have been renamed to ‘Inputs’ and ‘Approves’ respectively.    The next step would be to extract the above information into an MS Excel sheet (report) as follows:     Now the information in the Excel sheet can be fed to a sort of Data Migration Tools and then the appropriate access right granted to the corresponding system and screen depending on the connection types. That is:

1. ‘Person type A’ will not have any access at all.
2. ‘Person type B’ will not have any access at all.
3. ‘Person type C’ will only have ‘Input’ access to module X and for screen S1 only.
4. ‘Person type D’ will only have ‘Approve’ access to module Y and for screen S2 only.

  The above idea maybe wrong or maybe it defeats the primary purpose of ARIS but I just wanted to have your feedback and comments about it.   Thanks beforehand.   Cheers   Shameem