That sounds more like a process issue than a technology issue. The tools to manage this exist in the tech but mixing access, not restricting access, and other i

That sounds more like a process issue than a technology issue. The tools to manage this exist in the tech but mixing access, not restricting access, and other issues that persist in file shares, shared email boxes, mirroring AD access for new users, etc are the same issues as an old gmail that gets 1000 spam emails a day; it's a mess that needs to be audited and overhauled which is easiest by jumping to a new system/platform when able.