$IDDR Take a look at their product: Access Managem
Post# of 85315

Role Based Access Control – Based on the employee’s position in the company, they will receive access rights in applications.
Attribute Based Access Control – Based on the employee’s position in structures, the employee will receive access rights in applications.
Zone Based Access Control – Define the exact location in which an employee is allowed to have certain access rights in applications.
Contract Based Access Control – Give certain access rights based on the employee’s contract(s). These can be based on the start and end date.
Change Analysis – Get an overview of the impact of proposed changes before they are applied in applications.
https://www.iddriven.com/products/

